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with « onrrespnnding TDOA and/or RX>A 
Mtiima and is produced by cross -correlating a 
tcfemice si(na) with a coopenting signal (fig. 
S). The refcicnce ngnai comprises a copy of a 
signal Iniuinilbnl by (he mubilc Inasmilter »» 
a Gist antenna sad the cooperating 
■ copy of the same stgozl 
»ond antenm. The tnethod 
I determining a most lilvly 
range of TDOA aadtor FDOA csdnuies, and 
ihea identifying an optimal cross-ccrrclation 
value within a tobset of crois-conclation 
values (fig. 10) corresponding to the most 
likely range of TDOA and/or FDOA estimates. 
The TDOA and/or FDOA valw: 



employed in calculating the locattoa of (he 
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IMPROVED METHOD FOR ESTIMATING TDOA AND FDOA IN A 
WIREXESS LOCATION SYSTEM 

FIEU> OF THE INVENTION 

The present invendoa relates generally to methods and apparatus for locating 
wireless transmitten, such as those used in analog or digital cellular systems, peisonal 
COTummicaticins systems (PCS), enhanced specialized mobile radios (ESMRs), and other 
types of wireless communicaticms systems. More particularly, the present invention 
relates to impmved methods for detennining time difference of axriyal (TDOA) and 
frequency differeQce of arrival (FDOA) in a wireless location system. 

BACKGROUND OF THE INVramON 

Early woifc relating to Wireless Location Systems is described in U.S. Patent 
Nimiber 5327.144, July S, 1994, "Cellular Telephone Location System," which discloses 
a system for locating ceUular telephones using novel time difToence of atrival (TDOA) 
techniques. F^irther enhancements of the system disclosed in Uie '144 patent are disclosed 
in US. Patent Number 5,608,410. March 4, 1997. "System for Locating a Source of 
Bursty Transmissions.'' Both of diese patents are asagned to TrucPositioi^ Inc.. the 
assignee of the present invention, and both are incorporated herein by reference. 
TruePositi<Hi has ccmttnued to develop significant enhancements to the original inventive 
concepts and have developed techniques to fiirther improve the accuracy of Wireless 
Locaticm Systems while significantly reducing the cost of these systems. Patents relating 
to such enhancements include: US. Patent No. 6,091,362, July IS, 2000, "Bandwidth 
Synthesis for Wireless Location System": U.S. Patent No. 6.097,336, August 1, 2000. 
"Mefliod for Ini(novmg the Accuracy of a V^less Location System"; US. Patent No. 
6,1 1 5,599. Sqitember 5, 2000, "Directed Retry Method for Use in a Wireless Location . 
System"; US. Patent No. 6.172,644 Bl, January 9. 2001, "Emergency Location Method 
for a Wireless Location System"; and U.S. Patent No. 6,184,829 Bl, Feibruary 6, 2001, 
"Calibration for Wireless Location System." 



Over the past few years, the cellular industiy has increased the number of air interface 
protocols available for use by wireless telephones, increased the rwmber of frequency 
bands in yrbidti wireless or mobile telephones may operate, and c3q)Bnded the number of 



tcrms that refer or relate to mobile telephones to include '^personal communications 
services", "wireless", and others. The air interface protocols now include AMPS. N- 
AMPS, TDMA, CDMA, GSM.TACS. ESMR, GPRS. EDGE, and others. The changes in 
terminology and increases in the number of air interfaces do not change the basic 
principles and inventions discovered and enhanced by the inventors. However, in 
keeping with the current terminology of the industry, the inventors now call the sfystem 
desc^iibed herein a Wireless Location System. 

The inventors have conducted ortensive experiments with &e Wireless Location System 
technology to demonstrate both the viability and value of the technology. For example, 
several experiments were conducted during several months of 1995 and 1996 in the cities 
of Philadelphia and Baltimore to verify the system's ability to mitigate multipath in large 
urban environments. Then, in 1996 the mventois constructed a Systran in Houston that 
was us^ to test the technology's effectiveness in that area and its ability to interface 
directly with E9-1-1 systems. Then, in 1997, the system was tested in a 350 square mile 
area in New Jersey and was used to locate real S^l-1 calls from real people in trouble. 
Since that time, foe system test has been expanded to include 125 cell sites covering an 
area of over 2,000 square miles. During all of foese tests, techniques fliscusscd and 
disclosed heran were tested for effectiveness and forfoer deveU^>ed, and the system has 
been demonstrated to overcome the limitations of other approadbes that have been 
proposed for locadng wireless telephones. Indeed, as of December, 1998, no ottier 
Wireless Location System has been installed anywhere else in the world that is capable 
of locating live 9-1-1 callers. The innovation of foe Wireless Location System disclosed 
herein has been acknowledged in the wireless industiy by foe extensive amount of media 
coverage given to foe system's c^ahilitiea, as well as by awards. For exan^ile, the 
prestigious Wireless Appy Award was granted to foe system by foe Cellular Telephone 
Industiy Association in October, 1997, and the Christopher Cohnnbus Fellowshqi 
Foundatiim and Discover Magazine found foe Wireless Location Syston to be one of the 
top 4 innovations of 1 998 out of 4,000 nominations submitted. 

The vahie and importance of the T^ueless Location System has been ackno^edged by 
foe wireless communications industiy. In June 195>6, the Federal Communications 
Commisaton issued lequiiements for foe wireless eonununications industiy to dqi>Ioy 
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location systems for use in locating wireless 9-1-1 callers, with a deadline of October 




transmitter in the transmission. Some of the differences in the air interface protocols are 






2001. The location of wireless E9-1-1 callers \vill save response time, save lives, and 




discussed below: 






save enormous costs because of reduced use of emergency responses resources. In 










addition, numerous surveys and studies have concluded that various wireless 




AMPS — This is the origina] air interface protocol used for cclhilar communications in 
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qipUcations. such as location sensitive billing, fleet management, and others, will have 


5 


the U.S. fri the AMPS system, separate dedicated channels are assigned for use by 






g)«at commeicial values in the coming srears. 




control channeb (RCC). According to the TIA/EIA Standard IS-553A, every control 










channel block must begin at cellular channel 333 or 334, but the block may be of 






BadcRround on Wireless Communications Systems 




variable length. In die U.S., by convenUon, the AMPS control channel block is 21 






Tbsn are many different types of air interface protocols used for wireless 




channds wide, but die use of a 26-channel block is also known. A reverse voice channel 
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communications systems. These protocols are used in different frequency bands, hodi in 


10 


(RVC) may occi^>y any channel that is not assigned to a control channel. The control 






the U.S. and internationally. The frequency band does not impact ttie 'V^reless Location 




channd moduhition u FSK (fioqucncy shift keying), while Uic voice channeb are 






System's efiectivenesa at locating wireless tdqihoncs. 




modulated using FM (firequency modulation). 






All air interface protocols use two types of '^channels". The first type includes control 




N-AMPS - This air interface is an aspaaaaam of the AMPS air interface protocol, and is 




15 


channels Uiat are used for conveying infbnnation about the wireless telqihone or 


IS 


defined in EIA/TIA standard IS«88. The control channeb are substantially the same as 






transmitter, for initiating or tcnninating calls, or for tnmsfening bursty data. For 




for AMPS; however, the voice channeb are different. The voice channeb occt^y less 






exanvle. some types of short messaging services transfer data over the control channel. 




dian 10 KHz of bandwidth, versus die 30 KHz used for AMPS, and the modulation is 






In different air inter&ces, control channeb are known by different temunology, but the 




FM. 






use of (he oontrol channeb in each air interface is similar. Control channels generally 








20 


have identifying information about the wireless telephone or transmitter contained in the 


20 


TDMA-This interface is also known D-AMPS* and is de&ied in EIA/TIA standard IS- 






tnmsmission. Control diamKb abo include various data transfer protocols diat are not 




136. Ibis air intoftce is diaracterizedby die use of both frequency and time separation. 






voice specific - these include General i^clcet Radio Service (GPRSX &ihanced Data rate 




Control channeb are known as Digital Control Channeb (DCCH) and are transmitted in 






for GSM Evolution (EDGE), and Enhanced GPRS (EGPRS). 




bursts in timeslots assigned for use by DCCH. Unlike AMPS, DCCH may be assigned 










any«4iere in die frequency band, aldiou^ diere are generally smne frequency 
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The second ^pe inchides voice channeb that are typically used for conveying voice 


25 


assignments ttiat are more attractive than odiers based upon die use of probability blocks. 






conunnnicalions over the air interface. These channeb are only used after a call has bem 




Voice rh'wwelK are known as Distal Traffic Channeb (pTC). DCCH and DTC may 






set 19 using die control channels. Voice channeb will typically use iledicated resources 




occupy the same frequency assignments, but not the same timeslot assignment in a given 






widiin dte wirdess communications system whereas control channeb will use shared 




fivquency assignment DCCH and DTC use the same modulation scheme, known as ti/A 






resources. TMs distinction will gmerally make the use of CGntrol channds for wireless 




DQPSK (differential quadrature phase shift keying). In die cellular band, a carrier may 




30 


location pmposes more cost elective than ttie use of voice di^nn^ although there are 


30 


use both the AMPS and TDMA protocols, as long as the frequency assignments for each 






some applications for yduch r^ubr locatian on the voice channel is desired. Voice 




protocol are kept separated. A canier may also uggregate digital channeJs togedwr to 






diamieb generally do not have identilVi^ infonnation about the wireless tdepfaone ot 
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support higher speed data transfer protocols such as GPRS and EDGE. 
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SUMMARY OF THE INVENTION 






CDMA - This air interface is defined by EIA/TIA standard IS-95A. This air interface is 




As is well known to those skilled in the art of wireless location, measured TDOA 






characterized by the use of both frequency and code sqjaiation. However, because 




values may be employed to determine the geographic location of a wireless transmitter. 






adjacent cell sites may use the same frequency sets, CDMA is also characterized by very 




Similarly, measured FDOA values may be employed to determine the velocity of a 
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careful power control. This careful power control leads to a situation known to those 
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wireless transmitter. The present invention is particularly directed to in:q?roved methods 






skilled in the art as tiie near-far problem, which makes wireless location difficult for 




for detennining sodl TDOA and/or FDOA values. The invention can be used to limit the 






most approachrs to fimction properly. Control chamiels are known as Access Channels, 




frequencies and time period examined for presence of ihe signal to be located, which can 






and voice nhirrwil* are known as TrafiSc Channels. Access and TrafiELc Channels may 




result in improvements in terms of better signal detection, lower false signal detection. 






abate the Mtwa frequency band, but are separated by code. Access, and Traffic Channeb 




and in faster and more efiEicient use of processing resources to locate a call. 




10 


use ttw same modidatitm scheme, known as OQPSK. CDMA can siqiport higher speed 


10 








data ixansfer protocob by aggregating codes together. 




For example, in an exemplary implementation of the present invention, a method used in 










locating a mobile transmitter includes providing a set of cross-correlation vahies, 






GSM - This air interfile is defined by the intematiraial standard Global System fbr 




wfacxdn each cross-cotielation value is associated with a corresponding TDOA and/or 






Mobile Communications. Like TDMA, GSM is characterized by ihe use of both 




FDOA and b produced by cross-correlating a reference signal with a 




15 


frequency and time separation. The channel bandwidtfi is 200 Klli, whidb is wider than 


15 


cooperatmg signal. The reference signal comprises a copy of a signal transmitted by the 






the 30 KHz used for TDMA. Control channeb are known as Standalone Dedicated 




mobile transmitter as received at a first antemiB and the cooperating signal comprises a 






Control Channeb (SDCCHX and are transmitted in bursts in timeslots assigned for use 




copy of d» same signal as received at a second antenna. Hie method further inchides 






by SDCCH. SDCCH may be assigned anywhere in the frequency ban± Voice channeb 




detBmiining a most likely range of TTIOA and/or FTOA estimates, and dien identifying 






are known as Traffic Channeb (TCH). SDCCH and TCH may occtqiy the same 




an optimal cross-correlation vdue within a subset of cross-conelation values 




20 


frequency assignments, but not the same timestot assignment in a given frequency 


20 


coneqianding to die most likely nmge of TDOA and/or FDOA rstimafwt, The TDOA 






assignment. SDCCH and TCH use the same modulation scheme, known as GMSK. GSM • 




and/or FDOA vahie corresponding to die optimal cross-conelation vahic u dien 






can also siqjpoxt higher data transfer protocob sudi as GPRS and EGPRS. 




employed in calculating the location of the mobile transmitter. 






Within this specification the refmnce to any one of the air inter&ces shall refer to all of 




Other features and advantages of the invention are disclosed below. 




25 


die air inteifrtces, unless q>ecified otherwise. Additionally, a reference to control 


25 








channds or voice channeb shall refer to all types of control or voice channels, whatever 




BRIEF DESCRIPTION OP THE DRAWINGS 






die preferred temunology foot a particular air int^ce. Finally, there are many more 




Figures 1 and 1 A schematically depict a V^reless Locatixm System in accordance 






types of air interfaces used throughout die world, and there is no intent to exclude any air 




with the present invention. 






interf^e from the inventive concepts described within thu specification. Indeed, those 








30 


skilled in the ait will recognize other interfaces used elsewhere are derivatives of or 


30 


Figure 2 schematically depicb a Signal Collection System (SCS) 10 in accordance widi 






similar in class to those described above. 




the present invention. 
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Figure 2A schematically depicts a receiver module 10-2 eti^loyed by the Signal 
Collection System. 

Figures 2B and 2C schematically depict alternative ways of coiq>ling the receiver 
5 module(s) 10-2 to the antetmas 10-1. 

Figure 2C-1 is a flowchart of a process employed by the Wireless Location System when 
using narrowimid receiva- modules. 

10 Figure 2D schematically depicts a DSP nradule 10-3 employed in the Signal Collection 
System in accordance with the present invention. 

Figure 2E is a flowchart of die operation of the DSP module(s) 10-3, and Figure 2E-1 is 
a flowdiart of the process employed by the DSP modules for detecting active channels. 

IS 

Figure 2F sdicmatically depicts a Control and Communications Module 10-S in 
accordance with the jvesent invention. 

Figures 2G-2J depict aspects of tiie presentfy preferred SCS cabliration methods. Figure 
20 2G is a schematic tltostnitioin of baselines and error values used to txphan an extental 
calibration method in accordance with the present- invention. Figure 2H is a flowchait of 
an internal calibration metiwd. Figure 21 is an exeniplary transfer functicm of an AMPS 
control channd and Figure 2J depicts an exenqilary comb stgnaL 

25 Figures 2K and 2L are flowcharts of two methods for monitoring perfonnance of a 
Wireless Location System in accordance wife the present invention. 

Figure 3 schematically depicts a TDOA Location Processor 12 in accordance with die 



Figure 3 A deptcU the structure of an exenqilary network map maintained by the TLP 
ccmtrallers in accordance witii the present invention. 
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Figures 4 and 4A schematically depict different aspects of an Applications Processor 14 
in acc<xdance with the present inventiraL 

Figure 5 is a flowchart of a central station>based location processing method in 
5 acccndance with the present invention. 

Figure 6 is a flowchart of a station-based location processing method in accordance with 
the present inventitm. 

10 Figure 7 is a flowdiart of a method fcr determining, for each transmissimi for which a 
location is desired, whether to employ central or station-based processing. 

Figure 8 is a flowdiart of a dtynamic process used to select cooperating antennas and 
SCS's 10 used in location processiiig. 

15 

ngui« 9 is diagram dial is referred to below in explaining a method for selecting a 
candidate list of SCS's and antennas using a predetennined set of criteria. 

Rgure 10 is a flowchart of an unproved method for estimating TDOA and/or FDOA in 
20 accordance with the present invention. 

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

A goal of the present invention is to produce better TDOA and FDOA estimates 
fcH- use in deteimining the location of mobile of wireless phones and other mobile 

25 transmitters by using a combination of system topology, geoffsfbic topology and RF 
propagation information to create a set of assun^itkms about a signal recdved by one of 
the network of signal collection site receivers. Having received the signal at one site, the 
time interval for any other site can be estimated from the distance between the two sites. 
The Doppler duft of the signal at die single site allows for some velocity information to 

30 be collected and thus any other site may be allowed to cottsttmn the fipequencies 

searched. Since a much smalla- search window is produced through the use of these 
assun^tions, the numba offUse positives" is reduced and the signal coirdation 
direshold may be reduced, allowing finr signals widi lower aignal-to-ncHSe ratio (SNR) to 
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contribute to the TDOA, ADA (angle of arrival), or hybrid TDOA/ ADA location 
calculation. (The expression "false positives" means &lse or incorrect identification of a 
signal received at a cooperating site as being the same as the signal received at the 
reference antenna site.) 

5 

The following is a description of an iliustrative WLS of the kind in which the present 
invention may be used. This 'description is inteitded to provide the interested reader with 
a tiiorough understanding of a prescDlly prefcned envinmment in wfaicfa the present 
invention may be utilized. It should be noted, however, that, except to the extent that 

10 they may be expressly so limited, the claims ofthe present education are by no means 
limited to the details of the illustrative WLS described herein. Dideed. e.g., die present 
inventoss regard their invention as being qipltcable to Wireless Location Systems 
characterized as TDOA systems, AOA systems, and hybrid TDOA/AOA systems. 
Following the description of the iUostrative WLS. presently preferred embodiments of 

15 the inventive method fbr estimating TE>OA and FDOA are described. 

OverriewofWLS 

A \K^reless Location System, or WLS, may be configured to operate as a passive 
overiay to a wireless conmiunications system, sudi as a cellular, PCS, or ESMR system, 

20 although the concepts are not limited to just those types of conmaunications systems. 

Wireless communications systems are generally not suitable for locating wneless devices 
because the designs of the wireless transmitters and cell sites do not include the 
necessary functionality to achieve accurate location. Accurate location in this iqiplication 
is defined as accuracy of 100 to 400 feet RMS (root mean square). This is distinguished 

25 fiom the location accuracy that can be achieved by existing cell sites, which is generally 
limited to the radius of the cell site. In general, cell sites are not designed or programmed 
to cooperate between and among themselves to detcmiine wireless transmitter location. 
Additionally, wireless transmittera such as cellular and PCS telephones are designed to 
-be low cost and therefore generally do not have locating capabih'ty built-in. A WLS m^ 

30 be designed to be a low cost addition to a wireless communications system that involves 
mioimal changes to cell sites and no changes at all to standard wireless transmitters. The 
system may be considered passive because it does not contain transmitten,'and tiierefore 
does not cause int ei Caa ice to the wireless ounmuucations system. 



As shown in Figure 1, the Wireless Location System has four major kinds of 
subsystems: the Signal Collection Systems (SCS's) 10, the TDOA Location Processors 
(TLP's) 12, the >^lication Processors (AP's) 14, and the Network Operations Console 
(NOC) 16. Each SCS is responsible fbr receiving the RF signals transmitted by the 
5 wireless transmitters on both control channels and voice channels. In general, each SCS 
is preferably installed at a wireless carrier's cell site, and therefore operates in parallel to 
a base station. Each TLP 12 is re^nsible for managing a network of SCS's 10 and for 
providing a centralized pool of digital signal processing (DSP) resources that can be used 
in the location calculations. The SCS's 10 and the TLP's 12 operate together to 

10 determine the location of the wireless transmitters, as will be discussed more fully below. 
Digital signal processing is the preferable manner in which to process radio signals 
because DSP's are relatively low cost, provide consistent performance, and are easily re- 
programmable to handle many different tasks. Both the SCS's 10 and TLP's 12 contain a 
significant nm miT** of DSP resources, and the software in these systems can operate 

i S dynanucally to determine who^e to perform a particular processing fimction based upon 
- tradeoflEi in processing time, communications time, queuing time, and cost Each TLP 12 
exists centrally pcimarily to reduce the overall cost of implementing the Wireless 
Location S^rstem, aldiouj^ the techniquBS discussed herein are not limited to the 
preforred architecture showxL That is, DSP resources can be relocated within the 

20 Wireless Location System without changing the basic concepts and fimctionality 
disclosed. 

The AP's 14 are responsible for matmg iw g all of the resources in the Wireless Locatitm 
System, including all of tiie SCS's 10 and TLP's 12. Each AP 14 also contains a 

25 specialized database that contains "triggers** for the Wireless Location System. In order 
to conserve resources, the Wireless Location System can be programmed to locate only 
certain pre-detexmined types of transmissions. When a transmission of a pre-determined 
Qrpe occurs, dien the Wireless Location System is triggered to b^n location processing. 
Odierwise, the Wireless Location System may be programmed to ignore the 

30 transmissioiL Each AP 14 also contains af^lications intetfiwes that permit a variety of 
applications to securely access the Wireless Location System. These applications may, 
for example, access location records in real time or non-real time, create or delete certain 
type of tirig^ts, or cause the Wireless Locatiot\ System to take odier actions. Each AP 14 
-10- 
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is also capable of certain post-processing fimctiom that allow the AP 14 to combine a 
numbei of location records to generate extended reports ox analyses usefiil for 
qjplications such as traffic monitoring or RF optimization. 

5 The NOC 1 6 is a netwoik management systan that provides operators of the Wireless 
Location System easy access to the programming parameters of the Wireless Location 
System. For example, in some cities, the "^A^less Location System may contain many 
hundreds or even thousands of SCS*s 10. The NOC is flie most effective way to manage 
a large ^Tireless Location System, usiog graphical user interfitce c^abilities. The NOC 

1 0 will also receive leal time alerts if certain functions within Ihe Wireless Location System 
are not operating properly. These real time alerts can be used by Oie operator to take 
corrective action quickly and {nevent a degradation of location service. Experience vnA 
trials of the Wireless Location System show that the ability of die system to maintain 
good location accuracy over time is directly related to the operator's ability to keep the 

IS system operating within its predetermined parameteis. 

Readers of U.S. Patents 5,327.144 and 5,608,410 and this specificatitm will note 
similarities between ttie reqiective ^sterns, bdeed, the system disclosed herdn is 
significantly based upon and also rignificantty enhanced from the system described in 

20 those previous patents. For example, the SCS 1 0 has been expanded and enhanced from 
the Antenna Site System described m 5,608,410. The SCS 10 now has the equability to 
siqiport many more antennas at a single cell site, and fuifher can siqiport the use of 
extended antemias as described below. This enables the SCS 10 to operate widi (be 
sectored cdl sites now commonly used. The SCS lOcan also transfer data fimn multiple 

25 «ii t«iiiiM at a egli Kite to the TLP 12 instead of always combining data from multiple 
antennas before transfer. Additionally, the SCS 10 con siqqKKl mn]tq>le air inter&ce 
protocols thereby allowing the SCS 10 to function even as a wireless canier continually 
changes the configuration of its system. 

30 The TLP 12 is similar to the Central Site System disclosed in 5.608,410, but has also 
been expanded and enhanced. For example, the TLP 12 has been made scaleable so that 
the amount of DSP resomces required by each TLP 12 can be ap p iop riatdy scaled to 
match the number of locations per second required by customen of the V^reless 
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Location System. In order to siipport scaling for different Wireless Location System 
capacities, a networidng scheme has been added to the TLP 12 so that multiple TLP's 12 
can cooperate to share RF data across wireless communication system network 
boundaries. Additionally, the TLP 12 has been given control means to dcteimine the 
SOS's 10, and more importantly the antennas at each of the SCS's 10, from which the 
TLP 12 is to receive data in order to process a specific location. Previously, the Antenna 
Site Systems automatically forwarded data to the Central Site System, whether requested 
or not by the Central Site System. Furthermore, the SCS 1 0 and TLP 12 combined have 
been designed with additional means for removing multipath from the received 



The Database Subsystem of the Central Site System bos been expanded and developed 
into the AP 14. The AP 14 can support a greater variety of applications than previously 
disclosed in 5,608,410. including the ability to post-process large volumes of location 

1 S records fivmi multiple wireless transmitters. This post-processed data can yield, fbr 

example, veiy effective maps for use by wireless carriers to improve and <q)timize the RF 
design of the communications ^stems. This can be achieved, for example;, by plotting 
the locations of all of the calleis in an area and the received signal strengOis at anumber 
of cell sites. The earner can then detennine whedicr eadicell site is, in fiwt, serving the 

20 exactcoverageaieadesiredbyfhecarria-.TheAP 14 can also now store location records 
ancmymously, tiiat is, with the MIK and/or otha* identity information removed Scam the 
location record, so that the location record can be used for RF optimization or traffic 
numitoaing without ai"i?'pg concenis about an individual user's privacy. 

25 As diown in Figure lA. a presently prefoxedinqilementation of the Wireless Location 
System tnchides a plurality of SCS re^ons eadi of which comprises multqile SCS's 10. 
For exanqile. "SCS Region 1" inchides SCS's lOA and lOB (and preferably others, not 
shown) ttiat are located at respective cell sites and share antennas with the base statitms 
at Ouse cell sites. Drop and insert units 1 1 A and IIB are used to interface firactiottal 

30 Tl/El lines to full Tl/El lines, winch in tun are coupled to a digital access and control 

system (DACS) 13A. The DACS 13A and another DACS 13B are used in the manner 

desoibed more fully below fbr commmucations between the SCS's lOA, lOB, etc., and 

multiple TLPs 1 2A. 12B, etc. As shown, tiw TLP's are typically collocated and 
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imcrconnected via an Ethernet network (backbone) and a second, redxmdant Ethernet 
network. Also coiq}led to the Ethernet networks are multiple AP's 14A and 14B, multiple 
NOCs 16A and 16B, and a terminal server 15. Routers 19A and 19B are used to cox^le 
one Wireless Location System to one or more other Wireless Location System<s). 

Signal Collection System 10 

Generally, cdl sites will have one of the following antenna configurations: (i) an 
anmidiiectionat site witii 1 or 2 receive antennas or (ii) a sectored site with 1, 2, or 3 
sectors, and with 1 or 2 receive antennas used in each sector. As the number of cell sites 
has increased in die U.S. and internationally, sectored cell sites have become the 
predominant configuratiaii. However, there are also a growing number of micro-fxUs and 
pico.«ells, vrtacb can be omnidiroctioiial. Therefbre. (he SCS 10 has been designed to be 
configurable for any of these typical cell sites and has been provided with mechanisms to 
employ any nuniber of antennas at a cell sitei 

The basic architectural elements of fte SCS 10 remain the same as for die Antenna Site 
System described in 5,608,410, but several enhancements have been made to increase the 
flexibility of the SCS 10 and to reduce ttie commennal d^loyment cost of the system. 
The most presently p ref err e d embodiment of die SCS 1 0 is described herein. The SCS 
10, an overview of which is shown in'Fignre 2, inchides digital receiver modules 10^2A 
through 10>2C; DSP modules 10-3A through ip-3C; a serial bus 10>4, a coqjrol and 
conununications module 10-5; a GPS module 10-6; and a clock distribution module 10- 
7. The SCS 10 has the following external connections: power, fractional Tl/El 
communications, RF connections to antennas, and a GPS antenna connection for the 
timing generaticn (or clock distribution) module 10-7. The architecture and packaging of 
the SCS 10 permit it to be physical^ collocated with cell sites («diich is the most 
common installation place). located at other types of towers (such as FM, AM, two-way 
emergency communications, television, etc.), or located at other building stracnmes (such 
as rooftops, silos, etc.). 

Timing Generation 

The Wireless Location System depends vpoa the accurate determination of time 
at all SCS's 1 0 contained wittiin a network. Several different timing generation systems 



have been described in previous disclosures, however the most presently preferred 
embodiment is based iqwn an enhanced GPS receiver 10-6. The enhanced GPS receiver 
difiers from most traditional GPS receivers in that the receiver contains algorithnis that 
remove some of the timing instability of the GPS signals, and guarantees that any two 
5 SCS's 1 0 contained within a network can receive timing pulses that are within 

approximately ten nanoseconds of each other. These enhanced GPS receivers arc now 
commercially available, and farther reduce some of the time reference related errors that 
wCTc observed in previous implementations of wireless location systems. While this 
enhanced GPS receiver can produce a very accurate time reference, the ou^m of the 

10 receiver may still h&ve an unacceptable phase noise. Therefore, the oa^ut of the receiver 
is input to a low phase noise, crystal oscillator-driven phase locked loop circuit that can 
now produce 10 MHz and one pulse per second (PPS) reference signals with less than 
0.01 degrees RMS of phase noise, and with the-pulse output at any SCS 1 0 in a Wireless 
Location System netwmk within ten nanoseconds of any other pulse at another SCS 10. 

15 This combination of enhanced GPS receiver, crystal oscillator, and phase locked loop is 
now the most preferred method to produce stable time and frequency reference signals 
with low phase noise. 

The SCS 10 has been designed to sappaxt nmttiple frequency bands and multiple carriers 
20 with equipment located at the same cell site. This can talm place by using multiple 

receivers internal to a single SCS chassis, or by uring multiple chassis each with separate 
leceiven. Ih the event tiiat multiple SCS chassis are placed at die same cell site, the 
SCS's 10 can share a single timing generation/clock distribution circmt 10-7 and thereby 
reduce overall system cost The 10 MHz and one PPS output signals from die timing 
25 generation cinmit an anqilified and buffered internal to the SCS 10, and dien made 

available via external connectors. Therefore a second SCS can recave its timing fiom a 
first SCS using the buffered output and die external connectars. These rignals can also be 
made available to base station equipment collocated at the cell site. This might be usefbl 
to die base station, for example, in inqiroving die froquoicy te-use pattern of a wireless 

30 
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Receiver Module 10-2 (Wideband Embodiment) 

When a wireless transmitter makes a transmission, the Wireless Location System 
must receive the transmission at multiple SCS's 10 located at multiple geographically 
dispersed cdl sites. TheiefbrB, each SCS 10 has the ability to receive a transmission on 
5 any KF chamid on niiich die transmission may ori^nate. Additionally, since the SCS 10 
is capable of supporting multiple air tnter&ce protocols, the SCS 1 0 also supports 
multiple types of RF diamiels. This is in contrast to most current base station receivers, 
which Qirically receive only one type of channel and are usually enable of recet^ong 
only on select RF diannels at each cell site. For cxanq>le. a ty^c^ TDMA base station 

10 receiver wiU only support 30 KHz wide channels, and each receiver is ]m)granuned to 
receive signals on only a single channel whose frequency does not chan^ oAen (i.e. 
there is a relatively fixed fiecjuency plan). Therefore, very few TDMA base station 
rvceivers would receive a transmission on any given frequency. As another example, 
even though some GSM base station receivers are capable of frequency hopping, the 

1 5 receivers at multiple base stations are generally not capable of simultaneously tuning to a 
single frequency for (he purpose of perfomung location processing. In feet, ttie lecdvers 
at GSM base statitms are pzogrammedto frequency hop to avoid using an RF channel 
that is being used by another transnutter so as to minimize interference. 

20 The SCS receiver module 10-2 upreferabfy a dual wideband digital receiver tfiat can 
receive the entiie frequmcfy band and all of ttieRF channels of an sir interface. For 
cellular systems in the .U.S., fiiis receiver module is other 1 S MHz wide or 25 MHz wide 
so that all of the diiir""^* of a single carrier or all of flie diannels of both carriers can be 
received. This receiver module has many of the dtaxacteiistics of tibe receiver previously 

25 described in Patent Nuniber 5,608/(IO, and Figure 2A is a block diagram of (he currently 
piefeired embodiment. Each receivo- module contains an RF tuner section 1 0-2-1 , a data 
tntetfoce and conUol section tO>2-2 and sn analog to digital eonvenion section 10-2-3. 
The RF tuner section 10-2- 1 inchides two fiill independent digital receiven (including 
Tuner #1 and Tuner #2) that convert the analog RF input fixnn an external connectc«- into 

30 a digitized data stream. Unlike most base station recdvers, &e SCS receiver module does 
not perform diversity combinins cr switdiing. Rather, the digitized signal fixnn each 
independent receiver is made available to tfie location processing. The present inventors 
have dAcrmined fiiat there is an advantage to flie location processirig, and espeoally the 
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multipath mitigation processing, to indq^endently process the signab from each antenna 
rather than perform combining on ttie recaver module. 

The receiver module 10-2 performs, or is coupled to elements that perform, the following 
S functions: automatic gain control (to support both nearby strong signals and far away 
weak signals), bandpass filtering to remove potentially interfering signals &om outside 
of the RF band of interest, synthesis of frequencies needed for mixing with the RF 
signals to create an IF signal that can be sampled, mixing, and analog to digital 
conversion (ADC) for saiiq>ling the RF signals and outputting a digitized data stream 

1 0 having an appropriate bandwidth and bit resolution. The frequency synthesizer locks the 
synthesized frequencies to the 10 MHz reference signal from the clock 
distritwtion/timing generation module 10-7 (Figure 2). All of foe circuits used in the 
receiver module mwint'^ the low phase noise characteristics of the timing reference 
signaL The receiver module preferably has a qMirious free dynamic range of al least 80 

15 dB. 

The receiver module 10-2 also contains dicuits to generate test frequencies and 
calibration signals, as well as test ports whoe measurements can be made by technicians 
during installation or troubleshooting. Various calibrati<m processes are described in 
20 finther detail below. The internally generated test frequencies and test ports provide an 
easy mednd for engineers and technicians to npidly test the receiver module and 
diagnose any suqiected problems. This is also especially usefid during the manufacturing 
process. 

25 One of foe advantages of foe Wireless Location System described herein is that no new 
antennas are required at cell sites. The Wireless Location System can use foe existing 
antennas already installed at most cell sites, including bofo onmi-directional and sectored 
antennas. This feature can result in significant savings in foe installation and 
mpfntmaTir!*. oosts of foe Wireless Location System versus other qiproaches that have 

30 been described in the prior ait The SCS's digital receivers 10-2 can be caanected to foe 

existing antennas in two ways, as sihown in Figures 2B and 2C, respectivdy. In Figure 

2B, the SCS receiven 10^2 are connected to the existing cdl site multi-coupler ra'RF 

splitter. In this maimer, the SCS 1 0 uses the cell site's existing low noise pre-anq}Iifier, 
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band pass filter, and multi-cot^ler or RF splitter. This type of connection usually timits 
the SCS 10 to supporting the frequency band of a single carrier. For example, an A-side 
cellular carrier will typically use the band pass filter to block signals from customers of 
the B-sde carrier, and vice vosa. 

5 

hi Figure 2C. the existing RF path at the cell site has been interrupted, and a new pre- 
anqilifier, band pass filter, and RF splitter has been added as part of the Wireless 
Location System. The new band pass filter will pass multiple contiguous frequency 
bands, such as both the A-side and B-side cellular carriers, thereby allowing the Wireless 

1 0 Location System to locate wireless transmitteis using both cellular systems but using tfie 
mtfflina* from a single cell site. In this configuration, the lA^less Location System uses 
matdied RF components at each cell site, so that the phase versus fiiequency responses 
are identical. This is in contrast to existing RF components, which maybe from different 
manufictorers or using different model numbers at various cell sites. Matching the 

IS teqxmse characteristics ofRF components reduces a possible source of eiTOT for die 
location processng, although the Unless Location System has die capability to 
compensate for these sources of enor. Finally, the liew pre-amplifier installed with the 
Wireless Locatiim System wiU have a ve^ low noise figure to improve the sensitivity of 
the SCS 10 at a cell site. The overall noise figure of the SCS digital receivers 10-2 is 

20 dominated by the noise figtne of the low noise amplifiers. Because the IKHreless Location 
System can use weak signals in locatiai inocessing, whereas the base staticm typically 
cannot process weak signals, die Wireless Location System can significantly benefit 
from a high quality, very low noise anvKfier. 

25 fai Older to inqpiove the ability of the Wireless Location System to accurately determine 
TDOA for a wireless transmission, the phase versus frequency response of the oeD site's 
RF components are detomined at the time of installation and iq>dated at other certain 
times and then Stand in a table in the V%eless Location System. This can be important 
because, for example, the band pass fiUeis and/or multi-couplers made by some 

30 manuftcnirers have a steep and non-linear phase versus frequency reqxmse near the 

edge of die pass band. If the edge of the pass band is very near to or coincident with fhe 

reverse control or voice channels, then the Wireless Location System would make 

incorrect measurements of the transmitted signal's phase characteristics if the Wireless 
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Location System did not correct foe measurements using the stored characteristics. This 
becomes even more important if a carrier has installed multi-couplers and/or band pass 
filters from more than one manufacturer, because foe characteristics at each site may be 
different In addtticKi to measoring foe phase versus frequency response, other 
5 envixonmental factors may cause changes to the RF pafo prior to foe ADC. These factors 
require occasional and sometimes periodic calibration in foe SCS 10. 

Alternative Narrowband Embodiment of Receiver Module 10-2 

Li addition or as an alternative to the widdiand receiver module, foe SCS 1 0 also 

10 supports a iiazKwbaxidenfoodinientoffhc receiver module 10-2. In contrast to the 

widdiand receiver module that can simultaneously receive all of foe RF chaimels in use 
by a wireless oommunicafions system, foe narrowband receiver can only receive oao or a 
few RF channels at a time. For example, the SCS 10 siq^its a 60 KHz narrowband 
receiver for use in AMPS/TDMA systems, covering two oondguous 30 KHz channels. 

1 5 This receiver is still a digital recover as described for foe wideband module, however the 
frequency synthesizing and mixing circuits are used to dynamically tune the recover 
module to various RF channds on ccnmnand. This dynamic tuning can typically occur in 
one millisecond or less, and the recdver can dwell on a spedfic RF channd for as loitg 
as required to recdve and di^tize RF data for location processing. 

20 

The purpose of foe narrowband receiver is to reduce die invleniaitation cost of a 
Wireless Location System from the cost that is incimred wifo widd>and recdvexs. Of 
course, foere is some loss of performance, but foe availability of foese multiple recdvers 
permits wirdess carriers to have more cost^perfonnance opticms. Additional inventive 

25 functions and enhancemmts have been added to the Wirdess Location System to stqiport . 
this new type of narrowband recdver. Whoi the wideband recdver is bdng used, all RF 
channels are received continuously at all SCS's 10, and subsequent to the transmission, 
the Wirdess Location Syston can use foe DSP's 10-3 (Figure 2) to dynamically select 
any RF channel from the digital memory. '\^fo foe narrowband recdver. foe Wirdess 

30 Location System must ensure a priori diat the narrowband recdvers at multiple cdl sites 
are simultaneously hmed to the same RF diannd so foat all recdvers can simultaneously 
' receive, digitize and store the same wireless ttdismission. For this reastm, foe 
narrowband recdver is generally used only for locating voice channel tnauanissions, 
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which can be known a priori to be making a transmission. Since cotitrol channel 




and sector, wherein appropriate typically means both available and collocated or 




transmissions can occur asynchronously at any time, the nairowbaiid receiver may not be 




in closest proximity; 




tuned to the correct channel to receive the transmission. 




the first SCS 10 receives a time segment of RF data, typically ranging from a few 








microseconds to tens of milliseconds, bom the first narrowband receiver and 


5 


When the nanowfadnd receivers are used for locating AMPS voice channel 


5 


evaluates the transmission's power, SNR, and modulation characteristics; 




transmissions, the Wireless Location System has the ability to tenqwrarily change the 




if the transmission's power or SNR is below a predetermined threshold, the Wireless 




modulation characteristics of the AMPS wireless transmitter to aid location processing. 




Location System waits a predetemiined length of time and then returns to the 




This may be necessary because AMPS voice channels are only FM modulated with the 




above third step (where the Wireless Location System detennines the cell site. 




addition of a low level siqiervtsory tone known as SAT. As is known in the art. the 




sector, etc.); 


10 


Cnuner-Rao lower bound of AMPS FM modulation is significantly worse than the 


10 


if the transmission is an AMPS voice channel transmission and the modulation is 




Manchester encoded FSK modulation used for AMPS reverse channels and "blank and 




below a threshold, then the AA^less Location System commands the wireless 




burst** transmissions on the voice channel. Furdier. AMPS wirel^ transmitten may be 




communications system to send a command to the first wireless transmitter to 








cause a *1>lBnk and bursf on the first wireless transmitter. 




transmitting with significantly reduced energy if there is no modulating input signal (ix.. 








no one is speaking). To inqnove die location estimate by improving tbc modulation 




the Wireless Location System requests the wireless oommunications system to 


15 


characteristics without dqiending on the eacistence or amplitude of an input modulating 


IS 


prevent hand-off of the wireless transmitter to another RF channel for a 




a^ial, the Wireless Location System can cause an AMPS wireless transmitter to transmit 




predetermined lengdi of time; 




a "blank and buisf* message at a point in time vbm die narrowband receivera ai multiple 




the Wireless Location System receives a response from the wireless communications 




SCS's 10 are tuned to die lO^'diannel cm which the message will be sent. This is further 




^tem indicting the time period during which the first wireless transmitter wiU 




described later. 




be prevented fiom handing-ofl^ and if commanded, die time period during which 


20 




20 


the wireless communications system will send a command to die first wireless 




The Wireless Location System perfomis the following steps when using the nanrowbaml 




transmitter to cause a **blank and burst**; 




recover module (see die flowchart of Hgure 2C-t): 




the Wireless Location System detennmes the fist of antennas that will be used in 




a first wireless transmitter is a priori oigaged in transmitting on a particular RF 




location procesdng (the antenna selection process is described below); 




channel^ 




die Wireless Location System detennmes the earliest Wireless Location System 


25 


the Wirdess Location System triggers to make a location esrimatr of die first 


25 


timestamp at which the narrowband receivers connected to the selected antennas 




wireless transmitter (the trigger may occur either intemally or externally via a 




are available to begin simultaneously collecting RF data fram the RF channel 




conmumdAvsponse inter&ce); 




eurrendy in use by the first wirdess trsnsmitter; 




die Wireless Location System determines die cdl site, sector. RF duumel, timeslot. 




based i^on die earliest Wireless Location Syston timestamp and the time periods in 




long code mask, and encryption key (all infozmation elements may not be 




the response from the wireless communications ^stem, the Wireless Location 


30 


necessary for all air interface protocob) currently in use by the first wireless 


30 


System commands the narrowband receivers connected to the antennas that will 




transmitter. 




be used in locatiott processing to time to die cell site, sector, and RF channel 




the Wireless Location System tunes an appropriate first naxrowband receiver at an 




eurxendy inuse by the fitst wireless transmitter and to receive RF data for a 




appnspnate first SCS 10 to die RF diannel and timeslot at dw designated cell ate 
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predetemiined dwell time (based upon the bandwidth of the signal, SNR, and 




system, random tuning used throughout the Wireless Location System will typically limit 




intqp:ation requirements); 




location processiiig tbrouglqiut to sbaat 2.5 locations per second per cell «te sector. 




the RF data received by the narrowband receivers are written into the dual port 








memory. 




Therefore, the narrowband receiver also siqjports another mode, known as automatic 


5 


loc^on processing on the received RF data commences, as described in Patent Nos. 


■5 


sequential tuning, which can perform location processing at a higher throughput For 




5,327,144 and 5.608,410 and in sections below; 




example, in a TDMA system, using stmilar assumptions about dwell time and setup time 




die Wireless Location System again detennines the cell dte, sector, RF channel. 




as for the narrowband receiver operation described above, sequential tuning can achieve 




timeslot, long code mask, and ennyptum key currently in use by die first wireless 




a location processing througtq>ut of about 41 locations per second per cell site sector. 




transmitter; 




meaning that all 395 TDMA RF channels can be processed in about 9 seconds. This 


10 


if the cell site, sector, RF channel, timeslot, long code made, and encryption key 


■ 10 


increased rate can be achieved by taking advantage of, for example, the two contiguous 




cunentty in use by the first wireless transmitter has changed between queries (i.e. 




RF rtiatwiela fhat caii be recei'^ simultaneously, location processing all three TDMA 




before and after gathering the RF data) the Wireless Location System ceases 




timeslDts in an RF rjwT^**, and eliminaling the need for synchronization with the 




location processing, causes an alert message that location processing failed 




wixdess communications system. When the Wireless Location System is using the 




because die wireless transmitter f-hapg'Mi transmission status during the period of 




narrowband receivers for sequential tunmg, the Wireless Location System has no 


IS 


time in which RF data was being received, and re-triggers diis entire process; 


15 


knowledge of the identity of the wireless transnutter because the Wireless Location 




location processing on the received RF data completes in accordance with the steps 




System does not wait for a trigger, nor does the Wireless Location System query the 




described below. 




wireless communications system for the identity information prior to receiving the 








transmission. In diis method, the Wireless Location System sequences dnough every cell 




The detennination of die tnfoimaticm elements inchiding cell site, sector, RF channel. 




site^ RF channel and time slot, performs location processing, and reports a location 


20 


timeslot, long code nusk, and enoyption key (all information elements may not be 


20 


record identifying a time stamp, cell site, RF channel, time slot, and location. Subsequent 




necessary for all air interface protocols) is typically <rf>tained by the Wireless Location 




to the iocaticm record rqxnt, the Wirdess Location System and the wireless 




System through a command / response interface between die Wireless Location System 




communications system mateh the location records to the wireless communications 




and the wireless ccmununications system. 




system's data indicating which wireless transmitters were in use at the time, and which 








cell sites, RF channels, and time slots were used by each wireless transmitter. Then, the 


25 


The use of the narrowband receiver in die maim» described above is known as random 


25 


Wireless Location System can retain die locatira records for wireless transmitters of 




tuning because the receivers can be directed to any RF channel on command from the 




interest, and discard those location records for the remaining wireless transmitters. 




system. One advantage to random tuning is that locations are processed only for diose 








wireless transmitters for vAach the Wireless Location System is triggered. One 




Disitai oisnal Processor AuOuUle 1 U-3 




disadvantage to random tuning is that various synchronization &ctors, including the 




The SCS digital receiver modules 10-2 ou'qnit a digitized RF data stream having a 


30 


interface between the wireless communications system and the V%eless Locaticm 


30 


specified bandwidth and bit resolution. Fox example, a 15 MHz embodiment of die 




System and the latency times in scheduling the necessary receivers throughout the 




wideband receiver may ou^t a data stream containing 60 miltion samples per second, at 




system, can limit the total location processing throu^put For example, in a TDMA 




a resohition of 14 bits per sanqile. This RF data stream will contain all of the RF 








channels that are used by the wireless communications system. The DSP modules 10-3 
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receive the digitized data stream, and can extract any individual RF channel through 
digital mixing and fittoing. The DSP's can also reduce the bit resohition upon command 
fiom the Wireless Location System, as needed to reduce the bandwidth requirements 
between the SCS 10 and TLP 1 2. The Wireless Location System can dynamically select 
5 the bit resohition at «^ich to forward digitized basdiand RF data, based upon die 

processinK requirements for each location. DSP*s arc used for these functions to reduce 
the systemic etrars ifaat can occur fixxm mixing and filtering with analog componaits. 
The use of DSP's aflows perfect matching in the processing between any two SCS's 10. 

10 A block diagram of the DSP modiUe 10-3 is shown is Figure 2D, and the (^>eT3tion of the 
DSP module is depicted by the flowchart of Figure 2E. As shown in Figure 2D, die DSP 
nxidule 10-3 comprises' the following elements: a pair of DSP elements 10-3-lA and 10- 
3-lB, referred to collectively as a "jSrst" DSP; serial to parallel converters 1 0-3-2; dual 
port memoiy dements 10-3-3; a second DSP 10-3^; a parallel to serial c<mveiter. a 

1 S FIFO buffer, a DSP 10-3-5 (inchidtng RAM) for detection, another DSP 10-3-6 for 
demodnlatton. and another DSP 10-3-7 for normalization and control; and an address 
generator 10-3-8. In a presently preferred embodiment, die DSP module 10-3 receives 
the wideband di^tized data stream (Figure 2E, step SI), and uses die first DSP (10-3-lA 
and 10^3-lB) to extract blocks of channels (step S2). For example, a first DSP 

20 piogiammed to operate as a digital drop receiver can extract four blocks of channels, 
wherrin each block includes at least 1 ^5 MHz of bandwiddi. This bandwiddi can 
include 42 channels of AMPS or TDMA, 6 channels of GSM, or 1 channel of CDMA 
The DSP docs not require the blocks to be condguous, as the DSP can independently 
digitally tune to any set of RF channels within the bandwidth of the wideband digitized 

25 data stream. The DSP can also perform wid^and or narrow band energy detection on all 
or any of the diannels in the block, and report the power levels by channd to the TLP 1 2 
(step S3). For example, every 1 0 ms, the DSP can perform widdiand energy detection 
and create on RF spectral mi^i for all channels for all receivers (see step S9). Because 
this spectral map can be sent fimn the SCS 10 to the TLP 12 eveiy 10 ms via die 

30 communicatioDs link connecting the SCS 1 0 and the TLP 12, a significant data overhead 

could exist Therefore, the DSP reduces the data oveihead by con^ianding the data into a 

finite number of levels. Nonnaily, for example, 84 dB of dynamic range could require 14 

bits. In the companding process in^Iemented by the DSP. die data is reduced, for 
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example, to only 4 bits by selecting 16 important RF spectral levels to send to the TLP 
12. The choice of the number of levels, and therefore the number of bits, as well as the 
representation of die levds. can be automatically adjusted by the Wireless Location 
System. Ibese adjustments are performed to maximize the infoimation value of the RF 
5 spectral messages sent to the TLP 12 as wdl as to optimize the use of the bandwidth 
available on the communications link between the SCS 10 and the TLP 12. 

After conversion, each block of RF diannds (each at least 1.25 MHz) is passed through 
serial to paralld converter 10-3-2 and then stored in dual port digits memoiy 1 0-3-3 

10 (stq> S4). The digital memoiy is a circular memoiy, ^ch means that the DSP module 
begins writing data into the first memory address and then continues sequentially until 
the last memory address is reached. When the last memory address is reached, the DSP 
returns to die first memoiy address and c<mtinues to sequentially write data into memoiy. 
Each DSP module typically contains enou^ memoiy to store several seconds of data for 

15 each block of RF channels to support the latency and queuing times in the location 
process. 

In the DSP module, the memoiy address at which digitized and convoted RF data is 
written into memory is the time staatp used throu^ut the Wireless Location System 
20 and wMch the tocation processing refisrences in dderroiningTIX>A In order to ensure 
that the time stanqis are aligned at eveiy SCS 10 in the Wirdess Locatitni System, the 
address generator 10-3-8 recdves the one pulse per second signd fiom the timing 
generation/clodc distribution module 10-7 (Figure 2). Periodically, the address generator 
at dl SCS's 10 in a Wirdess Location System will simultaneously reset Ihemsdves to a 

ttrntng enoss in the recording of time stanqis fiir each digitized data demat. 

The address gen«ator 10-3-8 ctmtrols both writing to and reading fimo the dud port 
digital memory 1 0-3-3. Writing takes places continuously nnce the ADC is contizmously 
30 sampling and digitizing RF signals and the Gist DSP (1 0-3-1 A and 10-3- IB) is 

conttniiottsly perfonnwig the digitd drop receiver function. However, reading occurs in 
bursts as the '^Mrdess Locaticm System requests data for performing demodulati<m and 
location processing. The V^rdess Location System m^ even perform location 
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prfMyiffffing recursively on a single transmission, and therefore requires access to the same 
data multiple timesL In order to service the many requirements of the Wireless Location 
System, the address generator allows the dual port digital memoiy to be read at a rate 
fiister than ttie writing occurs. Typicaify, reading can be perfomied eight times faster 
5 than writing. 

The DSP module 10-3 uses ttie seccmd DSP 10^3-4 to read the data fiom die distal 
memoiy 10-3-3, and then performs a second distal drop receiver function to extract 
baseband data fiom the blocks of RF channels (step S5). For example, the second DSP 

10 can extract any single 30 Klb AMPS or TDMA channel fiom any block of RF channels 
diat have been ^tized and stored in the memory. Likewise, the second DSP can extract 
any single GSM channel. The second DSP is not reqiiired to extract a CDMA diannel, 
since the duamd bandwidth occiqries the fidl bandwidth of the stored RF data. The 
combination of the first DSP 10-3- lA 10-3-lB and the second DSP 10-3-4 allows the 

15 DSP module to select, store, and recover any angle RF channel in a wireless 

oommunicatioiis system. A DSP module typicdly will store four blodcs of cfaannels. In a 
dual-mode AMFS/TDMA system, a single DSP module can eontinuously and 
rimultaneously monitor up to 42 analog reverse control diannels, up to 84 digital control 
diannels, and also be tasked to monitn and locato aiiy voice channd transmission. A 

20 single SCS chassis will typically support up to three recdver modules 10-2 (Figure 2), to 
cover three secton of two antennas each, and 19 to nine DSP modules (three DSP 
modules per recdver peimits an entire 15MHzbandwidtb to be simultaneously stored 
into di^td memory). Thus, the SCS 10 is a very modular system than can be easily 
scaled to match any type of cell site configuration and processing load. 

25 

The DSP module 10-3 dso performs other functtoos, including automatic detection of 
active channels used in each sector (step S6), demodulation (step S7), and station based 
location processing (step SS). The Wireless Location System maintains an active map of 
the usage of the RF channels in a wireless commumcatioos system (step 39), which 
30 enables the Wireless Location System to manage receiver and processing resources, and 
to rapidly initiate processing when a particular transmission of interest has occurred. The 
active map comprises a table maintained within the Wireless Location System that lists 
for each antenna connected to an SCS 10 the primaiy channels assigned to that SCS 10 
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and the protocob used in those channels. A primary chaimel is an RF control channel 
assigned to a collocated or neaifoy base station that the base station uses for 
communications with wireless transmitters. For example, in a typical cellular system 
with sectored cell sites, there wiU be one RF control channel fiequency assigned for use 
5 in each sector. Those control channel frcqucrades would typicdiy be assigned as primary 
channds for a coUocated SCS 10. 

The same SCS 10 may also be assigned to monitor the RF control chaimnls of other 
neaiby base stations as primary channds, even if other SCS's 10 also have the same 

10 primary diannels assigned. In this manner, the Wireless Location System inqilements a 
system demodulation redundancy diat ensures that any given wireless transmissicm has 
an infinitesimd piobability of being misff**. When this demodulation redundancy feature 
is used, the Wreless Location System will recdve, detect, and demodulate the same 
wirdess transmission two or more times at more dian one SCS 10. The '^Xnidess 

15 Location System includes means to detect when this multiple demodulation has odniried 
and to trigger location processing only once. This function conserves die processing and 
communications resouioes of the M^rdess Location System, and is fitrther described 
below. This ability for a singje SCS 10 to detect and demodulate wireless transmissions 
occnning at cell sites not collocated witii die SCS 10 peimits operators of the Wireless 

20 Location Syston to deploy moic efScienI Wirdess Location System networics. For 

example, the Wireless Location System may be designed sudi ttiat the Wirdess Locatitm 
System uses mudi fewer SCS's 10 than the wireless communications system has base 
stations. 

25 In the V^reless Location System, primary diannels are entered and maintained in the 
table using two methods: direct programming and automatic detection. Direct 
programming oonqnises entering primary channd data into fiie table using one of the 
Wireless Location System user interfaces, such as the Netwoik Operations Console 16 
(Figure IX or by recdving channd assignmwit data fiom the Wirdess Location System 

30 to wirdess communications system interface. Alternatively, the DSP module 10-3 also 
runs a background process known as automatic' detection in which the DSP uses spare or 
scheduled processing capacity to detect transmissioiis on various possible RF channels 
and then attempt to demodulate those transmissions udng probable protocols. The DSP 
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module can tbca confinn that the (Himaiy channels directly programmed are correct, and 




single system. There is a sigoiitcam cost advantage to supporting multiple protocols 




can also quickly detect changes made to channds at base station and send an alert to the 




within the single system, as only a single SCS 10 is reqmred at a cell site. Thb is in 




opesatQt of the \K^e$s Location System. 




contrast to mai^ base station architectures, which may require different transceiver 








modules for flifferent modulation protocols. For example, while the SCS 10 could 


5 


The DSP module pcrfoims the following steps in automatic detection (see Figure 2E- 1): 


S 


support AMPS, TDMA, and CDMA simultaneously in the same SCS 10, there is no base 




for each possible control and/or voice channel which may be used m the coverage 




station currently available that can si^iport this fimctianaUty. 




area of the SCS 10, peg counters are established (st^ S7-1); 








at the start of a detection period, all peg counters are reset to zero (step S7-2); 




The ability to detect and demochilate multif>le protocols also inchides the abitity to 




each time that a transmission occurs in a qiecified RF channel, and the received 




independently detect the use of authentication in messages transmitted over the certain 


10 


power level is above a particular pre-set threshold, die peg counter for that channel 


10 


air interbcc protocols. The use of authentication fields in wireless transmitters started to 




is incremented (stq> S7-3): 




become prevalent widiin the last few years as a means to reduce the occurrence of fraud 




ffach time that a transmission occurs in a specified RF channel, and the received 




in wireless communications systems. However, not all wirdess transmitters have 




power level is above a second particular pre-set threshold, the DSP module 




in^lemented auUientication. When authentication is used, the protocol generally inserts 




attempts to demodulate a certain portioo of the transmission uang a first preferred 




an additional field ir^ foe transmitted message. Frequently this field is inserted between 


15 


protocol (stqi S7-4>; 


15 


the identity of the wireless transmitter and the dialed digits m the transmitted message. 




if die demodulation is successful, a second peg counter for tibat channel is 




When demodulating a wireless transmission, the Wireless Location System determines • » 




incremented (step S7-S); 




the number of fields in foe transmitted message, as well as foe message type (i.e. 




if dM demodulation is nnipv*-«'ggfiii, the DSP module atten^ts to demodulate a 




registration, <mginati(«i, pagio re^wnse, etc). The Wireless Location System 




portion of the txansmisslon using a second preferred protocol (stqi S7-6): 




demodulates an fields and if extra fields appear to be present, giving consideration to foe 


20 


if the demodulation is sucoessfiil, a third peg counter for that channel is incremented 


20 


type of message transmitted, foen foe Wireless Location System tests all fields for a 




(stqi S7-7); 




trigger condition. For example, if foe dialed digits ^9 1 1 " apptai in the proper place in a 




at die end of a detection period, the Wirdess Location System reads an peg counters 




field, and foe field is located either in its proper place wifoout authaittcation or its proper 




(step S7-8); and 




place wifo aufoentication, foen the V^reless Location System triggers normally. In fois 




tfie Wireless Location System automatically assigns primary channels based upon the 




exanqile, foe digits "91 1" would be required to appca in sequence as "91 1** or '**91 1**. 


25 


peg oounteis (stqi S7-9). 


25 


wifo no other digits before or after dfoer sequence. This functionality reduces or 








eliminates a fidse trigger caused by the digits "911" q;ipeai]ng as part of an 




The operator of the Wireless Location System can review the peg counters and the 




authentication field. 




automatic assignment of primaiy chamiels and demodulation protocols, and override any 








settings that were performed automatically, hi addition, if more than two preferred 




The support for multiple demodulation protocols is inqxstam far foe Wreless Location 


30 


protocols may be used by the wireless canier, flien Ihc DSP module 1 0-3 can be 


30 


System to successfully operate because location processing must be quickly triggered 




downloaded with software to detect the additional protocols. The architecture of ttie SCS 




when a wireless caller has dialed "911". The Wirdess Location System can trigger 




10, based upon wideband receivers 10-2, DSP modules 10-3, and downloadable software 




location processing using two mefoods: the Wireless Location System will nidependentiy 




permits tfie Wireless Locaticm System to support multiple demodulatifm protocols in a 




demodulate control diaimd transmissions, and trigger tocation processing using any 
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numbor of criteria such as dialed digits, or the Wireless Location System may receive 




foe number of failures. This is useful in allowing operators to determine whefoer foe 




tiiggera from an external source such as the carrier's wireless communications system. 




signd thresholds for demodulation have been set optimally. 




The present inventors have found that independent demodulation by the SCS 1 0 results 








in the fostest time to trigger, as measured fiom the moment that a wireless user presses 




This module, as well as the other modules, can also self-report its identity to foe TLP 1 2. 


5 


the "SEND" or TALK." (or similar) button on a wireless transmitto'. 


5 


As described below, many SCS's 10 can be connoctcd to a single TLP 12. Typically, the 








communications between SCS's 10 and TLP's 12 is shared wifo foe commtmications 




Control and Conmnmicatioiis Module 10-5 




between base stations and MSC's. It is frequently difficult to quickly determine exactly 




The control and communications module 10-S, depicted in Hgure 2F. incluiles 




which SCS's 10 have been assigned to particular circuits. Therefore, foe SCS 10 contains 




data buffors 10-5-1. a coidroUer lO-S-2. menuny lO-S-3, a CPU 10-5^ and a Tl/El 




a hard coded identity, which is recorded at foe time of installation. This identity can be 


10 


commtmicati<nis chip 10-S<5. The module has many of the diaracteiistics previously 


10 


read and verified by foe TLP 1 2 to positively determine which SCS 10 has been asdgned 




described in Patent Number 5,608,410. Several enhancements have been added in the 




by a carrier to eadi of several difSerent communications circuits. 




present endiodimenL For example, One SCS 10 now inclute an automatic remote reset 








cqjability, evm if the CPU on the control and communicatimis module ceases to execute 




The SCS to TLP communications supports a variety of mess^ies, induding: commands 




its programmed software. This c^ability can reduce the operating costs of die Wireless 




• and responses, software download, status and heartbeat, parameter download, diagnostic. 


IS 


Location System because technidans are not required to travel to a cell site to reset an 


IS 


spectral data, phase data, primary channel demodulation, and RF data. The 




SCS 10 if it fails to operate normally. The automatic remote reset circuit operates by 




communications protocol is designed to optimize V^eless Location System operation by 




monitoring die communications interface between the SCS 10 and the TUP 12 for a 




TTimimiwng foe protocol overtiead and foe protocol includes a message priority sdieme. 




particular sequence of bits. This sequence of bits is a sequence that does not occur during 




Each message Ope is assigned a priori^, and die SCS 10 and foe TLP 12 will queue 




normal cmnmunications between the SCS 10 and the TLP 12. This sequmce, far 




messages 1^ priority such that a higher priority message is sent before a lower priority 


20 


example, may consist of an all ones pattern. The reset circuit operates irukpendently of 


20 


message is sent For exanqile, demodulation messages are generally set at a high priority 




the CPU so that even if the CPU has placed itself in a Indeed or other non-operating 




because foe Wirdess Location System must trigger location processing <m certain types 




status, the drcuit can still achieve the reset of the SCS lOandietumtheCPU toan 




of calls (i.e., E9-1-1) without delxy. Atfoouj^ higher priority messages am queued 




operating status. 




before lower priority messages, foe protocol generally does not preempt a message foat is 








already in transit That is, a message in the process of being sent across the SCS 10 to 


25 


This module now also has the ability to record and report a wide variety of statistics and 


25 


TLP 12 communications interfoce wOl be completed fiilly, but foen foe next message to 




variables used in monitoring or diagnosing the performance of the SCS 10. For example. 




be sent will be the highest priority message wifo foe earliest time stamp. In ord^ to 




the SCS 10 can monitor the percent csqpacity usage of any DSP or other processor in the 




minimize foe latency of high priority messatges, Icng messages, such as RF data, are sent 




SCS 10, as well as die communications tntoface between the SCS 10 and the TLP 12. 




in segments. For example, foe RF data for a full lOO-millisecond AMPS transmission 




These values are reported regularly to the AP 14 and the NOC 16, and are used to 




may be sq>arated into 10-iiuIlisecond segments. In this manner, a high priority message 


30 


d^enmne when additional processing and communications resources are required in the 


30 


may be queued in between segments of the RF data. 




system. For exanqile, alami thresholds may be set in the HOC to indicate to an operator 








if any resource is consistently exceeding a preset threshold. The S^ 10 can also monitor 








the mimber of times that transmissions have been successfully demodulated, as well as 
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Calibration and Perfonnance Monitoring 

Tbc architecture of the SCS 10 is heavily based upon digital technologies 
including the digital receiver and the digital signal processors. Once RF signals have 
been digitized, timing, fiequency, ar>d phase dififerences can be carefully controlled in 
5 the various processes. More in^ortantly, any timing, frequency, and phase differences 
can be perfectly matched between the various receivers and various SCS*s 1 0 used in the 
Wireless location System. However, prior to the ADC, the RF signals pass through a 
number of RF con^xments, including antennas, cables, low noise amplifiers, filters, 
di^lexois, muhi-couplos, and RF qtlitters. Each of these RF comp<ments has 

1 0 characteristics inqiortant to the V^eless Location System, inchiding delay and phase 
versus frequency reqxinse. When the RF and analog components are perfectly matched 
between the pairs ofSCS's 10. such as SCS lOAandSCS I OB in Figure 2G, then the 
efifects of these characteristics are automaticaUy eltnrinated in the location jKocessing. 
But vrhm the characteristics of the components are not matdied, then the location 

1 S processing can inadvertently include instrumental errors resulting from the mismatch. 
Additionally, many of these RF conqxments can e]q>erience instability with power, time, 
tftmp eratitre, or Other factMS that con add instrumental errors to the deteimination of 
location. Therefon^ several inventive tedmiques have beat develc^ied to calibrate the RF 
components in the Wireless Location System and to monitor the performance of the 

20 lA^less Location System on a regular basis. Subsequent to calibration, the Wireless 
Location System stores the values of these delays and phases versus frequency response 
^.e. by RF ghgnnei number) in a table in the Wireless Location System for use in 
correctiiig these instnmientBl emirs. Figures 2G-2J are referred lo below in escplainxng 
these calibration me&ods. 

25 

External Calibration Method 

Referring to Figure 2G. the timing stability of ttie Wireless Location System is 
measured along basdines, wherein each baseline is ocmipiised of two SCS's, IDA and 
lOB, and an imaginaiy tine (A • B) drawn between them, hi aTDOA/ FDOA type of 
30 ^^reless Location System, locations of wireless ttansnuttos are calculated by measuring 
file difEerences in the times that each SCS 10 records for the arrival of the signal froma 
wireless transmitter. Thus, it is importaot diat the differences in times measured by 
SCS's 1 0 along any baseline are largely attributed to die transmission time of the signal 
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frxjm the wireless transmitter and minimally attributed to the variations in the RF and 
analog components of the SCS's 10 themselves. To meet the accuracy goals of the 
Wireless Location System, the timing stability for any pair of SCS's 1 0 arc maintained at 
much less than 1 00 nanoseconds RMS (root mean square). Thus, the components of the 
5 Wireless Location System will contribute less than 100 feet RMS of instrumentation 
error in the estimation of the location of a wireless transmitter. Some of this error is 
allocated to the ambiguity of the signal used to calibrate the system. This ambiguity can 
be detmnined from the well-known Cramer-Rao tower boimd equation. In the case of an 
AMPS revose control chaimel, this error is q[)proximately 40 namoseconds RMS. The 
1 0 remainder of the ecnr budget is allocated to the components of the M%eless Location 
System, primarily the RF and analog conqmnents in the SCS 10. 

intbc external calibration method, the Wireless Location S^tem uses a network of 
calibration transmitters whose signal characteristics match those of the tai^get wireless 

1 S transmitters. These caliteation transmitters may be ordinaiy wireless telephones emitting 
periodic registration signals and/or page re^xmse signals. Each usable SCS-to-SCS 
baseline is preferably calibrated periodically using a caUbrarion transmitter that has a 
relative^ clear and unobstructed path to^both SCS's 10 associated with the basdlne. The 
calibration signal is processed identically to a signal from a target wireless transmitter. 

20 Since the TDOA values are kiiown a pfiori, any errors in the calculations are due to 
s^emie errors in the Wireless Location System. These systemic errors can then be 
removed in the subsequent location calculations for target transmitters. 

Figure 2G illustrates the external calibration method for minimizing timing enors. As 
25 shown, a first SCS lOA at apcint "A" and a second SCS lOA at apoint hove an 
associated baseline A-B. A calibration rignal emitted at time To by a calibration 
'transmitter at point "C" will theoretically reach first SCS IQA at time To + Tac- Tac is a 
measure of the amount of time required for the calibration signal to travel from the 
antemiami the calilaation transmitta to the dual port digital memory in adigital 
30 receiver. Likewise, the same calibration signal will reach second SCS 1 OB at a 

tfaeoretieal time To + Tbc- Usually, however, the calibration signal will not reach the 
digital memory and the distal signal processing components of the reflective SCS's 1 0 
at exactly the correct times. Rather, there will be errors el and ^ m Oie amount of time 
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(Tac> Tbc) it takes the calibration signal to propagate from the calibration transmitter to 
the SCS's 10, respectively, such that the exact times of arrival are actually To + Tac + el 
and To + Tac + e2. Such errors will be due to some extent to delays in the signal 
propagaticm throng^ the air, Lc, from die calibration transmitter's antenna to the SCS 
5 antennas; however, the errors will be due primarily to time varying characteristics in the 
SC^ fitmt end components. The errurs el and e2caimot be dctomined.perj'e because 
the system does not know die exact time (To) at which the calibivtion signal was 
transmitted. The system can, however, determine the cnor in the difference in the time of 
arrival of die calibrBlion signal at the req[>ective SCS's 10 of any given pair of SCS's 10. 

10 This TDOA error value is defined as the di ff er en ce between the measured TDOA value 
and the Oieoretical TDOA vahie -co. yvbamn to is the dieoretical diflfereoees between the 
theoretical dday values Tac and Tbc< Thewetical TDOA values for each pair of SCS's 
10 and eadi caUbiation transmitter are known because the positions of the SCS's 10 and 
calibration transmitter, and the speed at which the calibration signal propagates, are 

1 5 known. The measured TDOA baseline (TDOAa«) can be represented as TDOAa^b ■* To 
-i- e, wherdn € *■ el • e2. In a similar manner, a calibration signal bam a 8ec<md 
calibratton traiianiitter at point wiU have associated enors e3 and e4. The ultimo 
vahie of e to be subtracted from TDOA measurements for a target transmitter will be a 
function (e.g.. weighted average) of the c values derived for one or more calibration 

20 transmitters. Therefore, a given TDOA measurement (TDOAikowmi) fo' a pair of SCS's 
10 at points "X" and "Y" and a taiget wireless transmitter at an unknown location will be 
corrected as follows: 



TDOAx-y 



TDOAsauRd * €. 

kl€l +kZe2 + ,... kNeN, 



where kl, k2, etc., are weighting factors and € 1 , €2, etc., are the errors determined by 
subtracting the measured TDOA values from the theoretical values for each caUbration 
transmitter. In fliis example^ error value e 1 may the error value associated with the 
30 calibration transmitter at point **C in the drawing. The weighting foctots are dctezminod 
by the operator of the Wireless Locaticm System, and input into the configuration tables 
for each baselme. The operator will take into consideration the distance from each 
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calibration transmitter to the SCS's 10 at points "X" and "Y", the empirically determined 
line of sight from each calibration transmitter to the SCS's 10 at points "X" and "Y". and 
the contribution thai each SCS **X" and "Y** would have made to a location estimate of a 
wireless transmitter that mi^t be located in the vicinity of each calibration transmitter. 
5 Id general, calibration transmitters that are nearer to the SCS's 10 at points "X" and "Y" 
will be weighted higher than calibration transmiUers that are farther away, and 
calibration transmitters with better line of sight to the SCS's 1 0 at points and "Y" 
vdll be weighted higher than calibration transmitters with worse line of sigjit. 

10 Each enorcompraeitf el, e2. etc., and therefore the resulting enor components, can 
vary widely, and wildly, over time because some of the error component is due to 
multqiath reflection from Uie calibration transmitter to each SCS 10. The nuiltipadi 
reflection is very much path dependent and therefore will vary from measurement to 
measurement and from path to path. It is not an object of this method to determine die 

1 5 multipath reflection for these calibration paths, but rather to determinB die portion of the 
errors that are attributable to the conqwuents of ttie SCS's 10. Typically, dierefore, error 
values el and e3 will have a common oonqxiinent since they relate to the same first SCS 
lOA. Likewise, error vahies e2 and e4 will also have a common component since thqr 
relate to the second SCS lOB. It is known that while the multipath components can vary 

20 wildly, the component errois vary slowly and typicaOy vary sinusoidally. Therefore, in 
the external calibration method, the error values e are filtered using a weighted, time- 
based filter that decreases die .weight of the wildly var^ng multipath components vfbilc 
preserving the relativety slow chwigh'g error components attributed to the SCS's 10. One 
such exeoqilary filter used in the external calibration method is the Kahnan filter. 

25 

The period between calibration transmissions is varied depending on the error drift rates 
determined for the SCS components. The period of the drift rate should be much longer 
than the period of the calibration interval. The Wireless Location System monitors the 
period of the drift rate to dctcnnine continuously the rate of change, and may 
30 periodically adjust the calibration interval, if needed. Typically, the cahbration rate for a 
Wireless Location System such as one in accordance with the present invention is 
between 10 and 30 minutes. This corresponds well with the typical time period for the 
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rcgistrfltioTi rstc in & wireless coim imnicBtions system* If the V^ireless Location System 




The internal calibration method^ represented in the flowchart of Figure 2H, is particularly 




were to dctemiKie th&t the cMibnitioD tntervfll must be odjiisted to ft zxite fdster thon the 




suited for calibrating an individual first receiver system (i.e., SCS 10) that is 




registrstton i&te of tiie wireless commuxiications system, tf^gn the AP 1 4 figure 1) would 




characterized by a time- and fiequency-varying transfer function, wherein the transfer 




Hwtopifftirrftl ^y fbice the cafibiation tiansmitter to trsnsmit by paging ifac transmitter at (he 




function defines bow tiie amplitude and phase of a received signal will be altered by the 




piescribed interval* Each calibration transmitttf is individually addressable and thcicfbre 


5 


receiver system and the receiver system is utilized in a location system to determine the 




the calibration interval associated with each calilxation transmitter g^p be different. 




location of a wireless transmittn by, in part, determitting a difference in time of arrival 








of a signal transmitted by the wireless transmitter and received by tiie receiver system to 




Since die calihiadcm transmittefS used in the external calibration method are standard 




be calibrated and anotiier receivea- system, and vdietein tiie accuracy of tbe location 








estimate is dependent, in part, upon the accuracy of TDOA measurements made by tiie 




telephones from the other wireless transmitters that cure being located for various 


10 


system. An exanq>le of a AMPS RCC transfisr fhnction is depicted in Figure 21, which 




application purposes. The Wireless Location System maintains a list of the identities of 




depicts how the phase of the transfer function varies across die 21 control channels 




the calibration tzansmitters^ typicalty in the TLP 12 and in the 14. En a cellular 




planning 630 KHz. 




jj^stcnif die identity of the calibration t yii ^Mttri tt^** can be the I^obile Xdentity Number* or 








iv^Q^ When the caliteation tiansmitter itmifi^ a ^wwicT^iiggipai^ the transmission is leceived 




Refbrring to Figure 2H, the Internal calibration metiiod tnchides the steps of temporarily 


IS 


DV eacn l" ano oemocnnaicci oy me upiiaic av*^ kxi, i m wmcich i ^jcimoo 


IS 


and electronically disconnecting the antenna used by a receiver system from the receiver 




oysiera compaies me loennxy oi me uansniaoion wiia b pre*aujx^j maiuim uoi va 




system (step S-20); injecting an internally gmerated wideband si^ial witit known and 








stable signal characteristics into the first receiver system (step S-21); utilizing tiie 




the transmission was a calibration trwit ^tr'^^^^offf then the vyjxele^s Location System 




generated wideband signal to obtain an estimate of the manner in winch the transfer 




untiates external cahbration processmg. 




fimctimi varies across the bandwidth of the first receiver system (step S-22); and utilizing 


20 




20 


tbe estimate to mitigate the effects of the variation of the first transfer fimction on tiie 




inieiUai i^anuittuon memoa 




time and frequency measurements made by the first receiver system (step S-23). One 




In addition to the external calibration method* it is an ot^ect of the present 




example of a stable widd^and signal us^ for internal calitnation is a comb dgnal, vrfiich 




invention to calibrate all ch&nnels of the wideband digital receiver used in the SOS 10 of 




is comprised of muhqilB individual, equal-amplitude fiequency elements at a known 




0 Wireless Location System. The external cahbtation method will typically calibrate only 




spacing, such as 5 KHz. An example of such a signal is shown in Figure 21. 


25 


a single channel of the multiple channels used by the wideband digital receiver. TTus u 


25 






because the fixed cahbration trB&snutten will typically scan to the highest-power control 




The pntefifia must be temporarily disconnected during the internal calibration process to 




channel, which will typically be the same control channel each time. The transfer 




prevent extemal signals from entering the widdiand recdver and to guarantee that tixe 




function of a wideband digital receiver, along with the other associated components. 




receiver is only receiving the stable wideband signal. The antenna is electronically 




does not remain perfectly constant, however, and will vaiy with time and tempetatiire. 




disconnected only fbr a milliseconds to mitiirwiyjt chance of missing too much of 


30 


Therefore, even thou^ the external calibration method can successfully calibrate a 


30 


a signal from a wireless transmitter. In addition, tntemal calibration is typically 




single channel, there is no ossurance that die remaining channels will also be calibiated. 




performed immediately after external calibratian to minimize the possibitity tiiat tiie any 








component in the SCS 10 drifts during the interval between external and internal 








calibration. The anffm"* u disconnected fiom the wideband recaver using two 
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electronically cmttroMed RF relays (not diown). An RF relay cannot provide perfect 




synchronization with die external cahbration transmissions. In addition, a wireless 




isolation between input and output even when in the "off* position, but it can provide vtp 




ftffnim'"^"««^« « Itetwaen the receiver system and the extemal calibration 




to 70 dB of isolaticML Two relays may be used in series to increase the mnount of 




transmitter to exchange oonmiands and responses. The extemal transmitter may nse a 




isolation and to fiwther assure that no signal is leaked from the antenna to the widd>and 




directional antenna to direct tiie wideband signal on^ at die antennas of tiie SCS receiver 


5 


receiver during calibration. Similariy. when tnturni*! calibration fimction is not bong 


S 


system. Sudi as directional antenna m^ be a Yagi antenna (i.e. linear end-fire array). 




die iiitgiiti'l calibmitHi signal is turned ofi^ smA the two RF relays are fl|]ff> t^tm^l 




The calibration method preferably indudes making the extemal transmission only when 




oCTto prevent leakage of the internal calibration signals into the widd>and receiver whffn 




the directional antenna is aimed at tiie receiver system's atitomat and the risk of 




rtw; lecetver is collecting signals fiom wireless traiisiuitters. 




multipath reflection is low. 


10 


The extemal calibration method provides an absolute calibration of a single channel and 


10 


CalibratinK for Station Biases 




the internal calibraticm metiiod then caHbiates each other channel relative to the channel 




Another aspect of the present invention concerns a calibration method to correct 




that had bera absolutely calibrated. The comb signal is particularly suited as a stable 




fbr station Iriases in a SCS receiver system. The "station bias** is defined as the finite 




wideband signal because it can be easily generated wyiwg a stored replica of tfie signnl 




dday between vdien an RF signal fiom a wireless transmitter reaches the antenna and 




and a digital to analog convexter* 




when that same signal reached the widd>and receiver. The inventive method includes the 


IS 
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Btqp of measuring the length of tiie cable from the antennas to the filters and detomining 




External Calibration Using Wideband Calibratitm Signal 




the correspondii^ delays associated with the cable lengUi. la addition, die method 




The extemal calibration method described next may be used in connection with 




includes injecting a known signal into tiie filter, duplexor. multi-coivler, RF splitter 




an SCS 10 receiver system diaracterized by a tifn**- and freijuency-varying transfer 




and measuring the delay and phase response veisns fiequency response fiom the iiqrat of 




function, which preferably includes the antennas, filters, amplifiers, di^ilexon, multi- 




each device to the wideband receiver. The delay and phase values are tiien cmnbined and 


'20 


coiq>lcis, ^ilitters, and "'Ming associated with thw SCS receiver system. The method 


20 


used to cfxrect subsequent location measurements. When used witii the GPS based 




includes the step of transmitting a stable, known wideband calibration signal from an 




timing genoation described i^ov^ tiic method preferably includes correcting for the 




extemal transmitter. The wideband calibration signal is then used to estimate the transfer 




GPS cable lengtiis. MorcovR, an externally generated reference signal is preferably used 




function across a prescribed bandwidth of the SCS receiver system. The estimate of die 




to monitor changes in station bias that may arise due. to aging and weather. Finally, the 




transfer function is subsequently en^)loyed to mitigate the efiects of variation of tho 




station bias by RF channel and for each receiver system in ttie Wireless Location System 


25 


transfisr fhnction on subse(|uettf TDOA/PDOA measurements. The extemal transmission 


25 


is preferably stored in tabular fomi m ttw IKHieless Location System for use in ccnrecting 




is preferably of short duration and low power to avoid intei fei eiice with the wireless 




subsequent location processing. 




cftmmnniftatio*^'' system hosting the Wireless Ijocation System. 












Performance Monitoring 




In the preferred method, the SCS receiver system is synchronized with (he external 




The Wireless Location System xises methods sinular to calibration for 


30 


transmitter. Such synchronization may be perfonncd using GPS timing units. Moreover, 


30 


performance monitoring on a regular and ongoing basis. These m^hods are depicted in 




the receiver system may be progranmied to receive and process the entire wideband of 




the flowcharts of Figure 2K and 2L. Two methods of pcrfonnance monitoring are used: 




the calibration signal only at the time that the calibration signal is being sent The 




fixed phones and drive testing of stnveyed points. The fixed phone metiiod comprises the 




reed ver system will not perform calibration processing at any time other than when in 




following steps (see Figure 2K): 
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Standard wireless transmittos are peimanenlly placed at various points within the 
coverage area of the Wireless Location System (these ore then known as the fixed 
phones) (stq> S-30); 

fbs points 3t which the fixed fdiones have been placed are stirveyed so that their 
S tocatitm is precisely known to within a predetermined distance, for example ten 
feet (step S-31); 

the surveyed locations are stored in a table in the AP 14 (stq> S-32): 
die fixed phones are permitted to register on the wireless communications system, at 
tfie rate and interval set by the wireless commnnications system for all wireless 
10 transmitters on the system (step S-33); 

at each registration transmission by a fixed phone, ttie Wireless Location System 
locates the fixed phone using normal location pxocesstng (as with the calibrafion 
transmitters, the Wireless Locaticm System can identify a transmission as being 
from a fixed phone by storing the identities in a tnble) (step S-34); 
1 5 tfie Wireless Location System computes an error between the calculated location 
determined by the location processing and the stored location detemuned by 
survey (step S-35}; 

the location, the error value, and other measured parameters are stored along with a 
time stamp in a database in the AP 14 (step S-36): 
20 the AP 14 monitors the instant error and other measured parameters (collectively 
referred to as an extended location record) and additionally computes various 
statistical values of the eiroT(s) and other measured parameters (step S-37); and 
if any of the error or other values exceed a pre-dctcrmined threshold or a historical 
statistical value, either instantaneously or after performing statistical filtering over 
25 a prescribed number oflocation estimates, the AP 14 signals an alami to the 
operator of the Wreless Location System (step S-38). 

The extended location record includes a large number of measured parameters usefiilly 
for analyzing the instant and historical performance of the Wireless Location System. 
30 These parameters include: the RF channel used by the wireless transmitter, the antenna 
porl(s) used by the Wireless Location System to demodulate the wireless transmission, 
the antenna ports fiom which the Wireless Location System requested RF data, the peak, 
average, and variance in power of the transmission over the interval used for location 
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processing, the SCS 10 and antenna port diosen as the reference for location processing, 
the correlation value fiom the cross-q;>ectra correlation between every other SCS 10 and 
antenna used in location processing and the reference SCS 10 and antenna, the delay 
value for each baseline, the multipafb mitigation parameters, and ttn residual values 
5 remaining after the mulUpath mitigation calculations. Any of these measured parameters 
can be monitored by die Wireless Location System for the purpose of determining how 
the Wireless Location System is perfonning. One example of the type of monitoring 
performed by the Wireless Location System may be the variance between the instant 
vahie of the correlation on a baseline and the historical range of the correlation value. 
10 Another may be the variance between the instant value of the received power at a 

particular antenna and the historical range of the received power. Many other statistical 
values can be calculated and this list is not exhaustive. 

The iwmber of fixed phones placed into the coverage area of the V^reless Location 
1 5 System can be detemuned based upon the density of the cell sites, die difiSculty of the 

performed in die area. Typically die ratio is about one fixed phone for every six cell 
sites, however in some areas a ratio of one to one may be required The fixed pbcmes 
provide a continuous means to monitor the perfotmance of the Wireless Location 
20 System, as wdl as the monitor any changes in the frequency plan diat the carrier may 
have made. Many times, chattges in die frequency plan wall cause a variation in the 
perfotmiance of the Wireless Location System and the performance momtorixig of the 
fixed phones provide an inunediate indicatian to the Wireless Location System opoator. 

25 Drive testing ofsurveyed points is vayoinilar to die fixed phone monitoring. Fixed 
phones typically can only be located indoors where access to power is available Q.e. the 
phones must bo continuously powered on to be effective). To obtain a more complete 
measurement of the performance of the location performance, drive testing of outdoor 
test points is also performed. Referring to Figure 2L, as with the fixed phones, prescribed 

30 test points throughout the coverage area of the Wu«lcss Location System are surveyed to 

within ten feet (step S-40). Each test point is assigned a code, wherein the code consists 

of either a or a 'iT, foUowed by a sequence number (step S-41). For example, 

"^lOOl** throng '**1099^ may be a sequence of 99 codes used for test points. These 
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codes should be sequences, that vfbtax dialed, are meaningless to the wireless 
communicalians system 0.e. the codes do not cause a feature or oflier translation to occur 
in the MSG, except fw an intercqit message). The AP 14 stores ^ code for each test 
point along with die surveyed location {step S-42). Subsequent to these initial steps, any 
S wireless transmitter dialing any ofthe codes will be triggered and located using normal 
locati<m processing (steps S-43 and S-44). The Wireless Location System automatically 
computes an error between the calculated location determined by the location processing 
and the stored location determined by survey, and the location and the error value are 
stored along with atime stamp in a database in the AP 14 (steps S-45 and S-46). The AP 
10 14 moiutors the instant error, as well as various historical statistical values of tiie error. If 
flte RTor vahies exceed a pre-determtned dneshold or a histcxical statistical value, either 
instantaneously or aAer performing statistical filtering over a prescribed number of 
locatton estimates, die AP 14 signals an alarm to the operator offlie Wireless Location 
System (step S-47). 

15 

TDOA LocatioD Processor (TLP) 

The TLP 12. depicted in Figures 1, 1 A and 3, is a centralized digital agnal 
processing system that manages many aspects of the Wireless Location System, 
especially the SCS's 10, and provides control over the location processing. Because 

20 location processing is DSP intensive, one of the major advantages of the TUP 1 2 is that 
the DSP resources can be shared among location processing initiated by transmissions at 
any of the SCS's 10 in a Wireless Location System. That is, the additional cost of DSP's 
at the SCS's 10 is reduced by having the resource centrally available. As shown in 
Figure 3. there are three major components of the TLP 12: DSP modules 12-1, Tl/El 

25 communications modules 12-2 and a controller module 12-3. 

The Tl/El communications modules 12-2 provide the commtinicatioiis interface to the 

SCS's 10 (Tl and El arc standard communications speeds available throughout the 

world). Each SCS 10 communicates to a TLP 12 using one or more DSO's (which are 

30 typically 56Kbps or 64 Kbps). Each SCS 1 0 typically connects to a fiactional Tl or El 

cireuit, xising, e.g., a drop and insert unit or charmel bank at the cell site. Frequently, this 

circuit is shared with the base station, which communicates with the MSC. At a central 

site, the DSO's assigned to the base station are separated fiom the DSO's assigned to the 
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SCS's 10. This is typically accomplished external to die TLP 12 using a digital access 
and control system (DACS) 13 A that not only separates the DSO's but also grooms the 
DS0*5 fiom multiple SCS's 10 onto fiill Tl or El circuits. These circuits then connect 
fiom die DACS 13A to die DACS 13B and dien to die Tl/El commnntcations module 
5 on the TLP 12. Each Tl/El c<miinumcatioi>smodute contains sufficient digital memory 
tobuf&r packets of data to and finmeai^ SCS 10 communicating with die module. A 
single TLP chassis may support one or move Tl/El coinmunicatians modules. 

The DSP modules 12-1 provide a pooled resource for location processing. A single 
10 tnoduletnaytypicany contain two to dght digital signal pnicess(xs,eadi of wfaidi are 
equally available fi>r location processing. Two types of locaticm processing are 
siqpported: central based and station based, inliich are described in fiirtfaer detail bdow. 
The TLP cantroller 12-3 manages the DSP modale(s) 12-1 to obtain optimal tfaiougbput 
Each DSP module contains suffident digital monoiy to store all of die data necessary 
IS forlocationprocessing. A DSP is not engaged Until all ofthe data necessary to begin 
location proces»ng has been moved fiom each of die involved SCS's 10 to the digital 
memory on the DSP module. Only then is a DSP given die ^ecific task to locate a 
qieeific wireless transmitter. Using this technique, the DSP's , which are an expensive 
resource, are never kept waiting. A single TLP duusis may siqiport one or more DSP 
20 modules. 

The controller module 12-3 provides the real time management of all location processing 
within the Wireless Locaticm System. The AP 14 is the top-level management entity 
within the V^less Location System, however its database architecture is not 

25 sufitciendy fost to conduct the real time decision making when transmissiaiis occur. The 
controller module 12-3 recdvcs messages fiom the SCS's 10, including: status, spectral 
energy in various channels for various antennas, demodulated messages, and diagnostics. 
This enables the controller to continuously detennine events occurring in the Wireless 
Location System, as well as to send commands to take certain actions. When a controller 

30 module receives demodulated messages fiom SCS's 1 0, die controller module decides 

whether location processing is required for a particular wireless ttansnussion. The 

controller module 12-3 also determines which SCS's 10 and antennas to use in location 

processing, including whether to use central based or station based locaticm processing. 
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The caatroUer module commands SCS's 10 to return ttie necessaiy data, and commands 
the communicatioiis modules and DSP modules to sequentially perfoim thdr necessaiy 
roles in location processing. These steps are described below in further detail. 

S The contniUcr module 1 2-3 maintains a table known as (he Signal of bterest Table 
(SOIT)' This table contains all of the criteria that may be used to trigger location 
processing on o particular wireless transmission. The criteria may inchide. for example, 
the Mobfle Identity Nnmber, the Mobile Statitm ID, the Electronic Serial Nutriber. dialed 
digits, System ID, RF channel number, cdl site number rar sector number, type of 

10 transmission, and other types of data elements. Some of the trigger events may have 
higher or lower priority levels associated with them for use in detemiining the txder of 
processing. Higher priority location triggers will always be processing before lower 
priority location triggers. However, a lower priority trigger that has already begun 
location processing will complete the processing before being assigned to a higher 

15 priority task- The master Tasking List for the Wireless Location System is maintained on 
the AP 14, and copies of Ihe Tasking List are automatically downloaded to the Signal of 
Interest Table in each TLP 12 in the Wireless Location System. The full Signal of 
Interest Table is downloaded to a TLP 12 when the TLP 12 is reset or first starts. 
Subsequent to those two events, only changes are downloaded from the AP 1 4 to each 

20 TLP 1 2 to conserv-e communications bandwidth. The TLP 1 2 to AP 14 communications 
protocol preferably contains sufficient redundancy and oror checking to prevent 
incorrect data from ever being entered into the Signal of Interest Table. When the AP 14 
and TLP 12 periodically have spare processing edacity available, the AP 14 reconfirms 
entries in the Signal of Interest Table to ensure that alt Signal of Interest Table entries in 

25 the Wireless Location System are in Aill synchronizatioiL 

Each TLP chassis has a maximum capacity associated with the chassis. For example, a 

single TLP chassis may only have sufficient capacity to support between 48 and 60 

SCS's 10. When a wireless communications system is larger that the c«^>acity of a single 

30 TLP chassis, multiple TLP chassis are connected together using Ethernet networking. 

The controller module 1 2-3 is responsible for intcr-TLP communications and 

networking, and conmiimicBtcs with the controUer modules in other TLP chassis and 

with .^jplication Processors 14 ova* the Efliemet network. loter-TLP c 
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required when location processing requires the use of SCS's 10 thai are connected to 
different TLP chassis. Locatton processing for each wireless transmission is assigned to a 
siitglc DSP module in a single TLP chassis. The controller modules 12-3 in TLP chassis 
select the DSP module on which to perfoim location processing, and then route all of the 
RF data used in location processmg to that DSP module. If RF data is required from the 
SCS's 10 connected to more that one TLP 12, then the controller modules in all 
necessaiy TLP chassis communicate to move the RP data from all necessary SCS's 10 to 
dieir respective connected TLP's 12 and then to the DSP module and TLP chassis 
assigned to fho locatton processing. The controller module supports two fully 
independent Ethernet networks for redundancy. A break or failure in any one network 
causes the afiected TLP's 12 to immediately shift all conmumicattons to the other 



The controUer modules 12-3 maintain a conq>lete network vasp of the Wireless Location 

IS System, including the SCS's 1 0 associated with each TLP chassis. The network map is a 
table stored in the controller mochile contmning a list of the candidate SCS/antennas that 
may be used in location processing, and various parameters associated with each of die 
SCS/antennas. The structure of an exemplary network map is depicted in Figure 3 A. 
There is a separate entry in the table for each antenna connected to an SCS 10. When a 

20 wireless transmission occurs in an area that is covered by SCS 's 1 0 communicating with 
more than one TLP chassis, the controller modules in the involved TLP chassis 
determine which TLP chassis will be the "master" TLP chassis for the purpose of 
managing location processing. Typically, the TLP chassis associated with the SCS 10 
that has the primary channel assignment for the wireless transmission is assigned to be 

25 the master. Howevw, another TLP chassis may be assigned instead if that TLP 

temporarily has no DSP resources available for location processing, or if most of the 
SCS's 10 involved in location processing are connected to another TLP chassis and the 
controUer modules are minimizing inter-TLP communications. This decision making 
process is fully dynamic, but is assisted by tables in the TLP 12 that pre-determine the 

30 preferred TLP chassis for every primary channel assignment. The tables are created by 
the operator of the Wireless Location System, and programmed nsing the Network 
Operations Console. 
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The networking described herein fimctions for both TLP chassis associated with the 
same wireless earner, as well as for chassis that overiap or border the coverage area 
between two wireless caniets. Thus it is possible for a TLP 12 belomging to a first 
wireless earner to be netwodced and therefioro receive RF data horn a TLP 12 (and the 
5 SCS's 10 associated with that TLP 12) belonging to a second wireless carrier. Tlus 
networidng is particularily valuable in ruxal areas, vrba&n the performance of the 
Tireless Location System can be enhanced by deploying SCS's 10 at cell sites of 
multiple wireless earners. Since in many cases wireless earners do not collocate cell 
sites, tiiis feature enables the Wireless Location System to access more ^graphically 
1 0 diverse antennas than might be available if the Wireless Location System used only the 
cell sites fiom a single wireless earner. As described below, the proper selection and use 
of antemuis for location processing can enhance the performance of the Wireless 
Location System. 

1 5 The controller module 1 2-3 passes many messages, inchiding location records, to the AP 
14, many of which arc described below. Usually, however, demodulated data is not 
passed from the TLP 12 to the AP 14. If; however, the TLP 12 receives demodtilated 
data from a particular wireless transmitter and the TLP 12 identifies the wireless 
transmitter as being a registered customer of a second wireless carrier in a different 

20 coverage area, the TLP 1 2 may pass the demodulated data to the first (serving) AP 1 4A. 
This will enable the first AP 14A to communicate with a second AP 14B associated with 
the second wireless carrier, and determine whether the particular wireless transmitter has 
registered for any type of location services. If so, the second AP 14B may instruct the 
first AP 14A to place the identity of the particular wireless transmitter into the Signal of 

25 Interest Table so that the particular wireless transmitter will be located for as long as the 
particular wireless transmitter is in the coverage area of the first Wireless Location 
System associated with the first AP 14A. When the first Wireless Location System has 
detected that the particulsu- wireless transmitter has not registered in a time period 
exceeding a pre-determined threshold, the first AP 14A may instruct the second AP i4B 

30 that the identity of the particular wireless transmitter is being removed from the Signal of 
Interest Tabic for the reason of no longer being present in the coverage area associated 
with the first AP 14A. 
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Di^mostic Port 

The TLP 12 siqipaits a diagnostic port that is highly useful in the <q)eration and 
diagnosis of problems within ^ Wireless Location System. This dii^nostic pott can be 
accessed eidier locally at a TU> 12 or remotdy wcr die Etttemet network ooimecting the 
5 TLP's 12totheAP's.Thediagpo5ticportaiablesancqiei8torto writetoafileallof the 
demodulation and RF data zeceaved fiom the SCS's 10. as well as the intennediate and 
final results of all location processing. This data is erased finm the TLP 12 after 
processing a location estimate, and therefiire fhie diagnostic poit provides tfie means to 
save the data for later post-processixig and aiuUysis. The inventor's experience in 

10 operating large scale wireless k>eationsystans is that a very small number of locaticm 
estimates can occasionally have very large errors, and these large errors can dominatg the 
overall operating statistics of the Wireless Location System over any measurement 
period. Therefore, it is imp o rt a nt to i»ovide the operator with a set of tools fiiat enable 
die Wireless Locatton System to detect and trap the cause of the very large errors to 

15 diagnose and mitigate diose errors. The diagnostic port can be set to save the above 
information for all location estimates, for location estimates from particular wireless 
transmitters or at particular test points, or for location estimates that meet a certain 
criteria. For example, for fixed phones or drive testing of surveyed points, the diagnostic 
port can determine the error in the location estimate in real time and then write die above 

20 described information only for those location estimates whose error exceeds a 

predetermined threshold. The diagnostic port determines the error in real time by storing 
the siuveyed latitode, longimde coordinate of each fixed ph(me and drive test point in a 
table, and then calculating a radial error when a location estimate for the coireqxmding 
test point is made. 

25 

Redundancy 

The TLP's 12 implement redundancy using several inventive techniques, 
allowing the Wireless Location System to support an M plus N redundancy method. M 
phis N redxmdancy means thai N redundant (or standby) TLP chassis are used to provide 
30 full redundant backup to M online TLP chassis. For example, M may be ten and N may 
be two. 



WO03/WI961J 



PCT/USI)2«07S4 



20 



First, fhe controller modules in diOerent TLP chasas contfamoiisly exchange status and 
"heartbeat" messages at pre-detennined time intervals between themselves and with 
every AP 14 assigned to monitor llie TLP diassis. Thus, eveiy coatroUa module has 
continuous and fall status of every other controller module in the V^reless Location 
System. The controUer modules in different TLP chassis pCTodically select one 
contioUa module in one TLP 12 to be the master controUer for a groiqi of TLP chassis. 
The master contioUer may decide to place a first TLP chassis into off-line status if the 
jSrst TLP t2A reports a failed or degraded condition in its status message^ or if the first 
TLP 12A &ib to report any status or heartbeat messages within its assigned and pre- 
determined time. If the master controller places a first TLP 12A into off-line status, the 
master oootroller may assign a second TLP 12B to perform a redundant switchover and 
assume the tasks of the oCT-line fust TLP 12A. The second TLP 12B is automatically 
sent the configuration that had been loaded into die first TU 12A; this configuration 
may be downloaded fiom either the master controller or firc»n an AP 14 connected to the 
TLP's 12. The master controUer may be a controUer module on any one of the TLP's 12 
that is not in ofF-line status, however there is a preference thai the master controller be a 
controUer module in a stand-by TLP 12. When the master controUer is the controUer 
module in a stand-by TLP 12, the time requited to detect a failed first TLP 12A, place 
the first TLP 1 2A into off-line status, and then perform a redundant switchover can be 
accelerated. 



Second, all of the Tl or El communications between the SCS's 10 and each of the TLP 
Tl/El conunimicatioss modules 12-2 are preferably routed through a higb-reliabUity 
DACS that is dedicated to redundancy control. The DACS 13B is comicctcd to every 

25 groomed TI/El circuit containing DS0*8 bom SCS's 10 and is also connected to every 
Tl/El communications module 12-2 of every TIP 12. Every controller module at every 
TLP 1 2 contains a of the DACS 1 3B that describes the DACS' connection list and 
port assignments. This DACS 13B is connected to the Ethernet network described above 
and can be controUed by any of the controUer modiiles 12-3 at any of the TLP's 12. 

30 When a second TLP 1 2 is placed into off-line status by a master controUer, the master 
controUer sends commands to the DACS 13B to switch the groomed TI/El circuit 
communicating with the first TLP 12A to a second TLP 12B which had been in standby 
status. At die same time, the AP 14 downloads the complete caofiguxation fUe that was 
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being used by the second (and now oCT-line) TLP I2B to the third (and now online) TLP 
12C. The time fiom the first iletectiom of a failed first TLP chassis to the complete 
switch-over and assunqition of processing responsbilities by a ttiird TLP diassis is 
typically less than few seuxids. In many casea, no RF data is lost by the SCS's 10 
S associated with the fuled first TLP dias«s, and location processing can continue without 
interruption. At die time of a TLP fiul-over vAnea a first TLP 12A is placed into off-line 
status, the tiOC 16 creates an alert to notify the l^%dess Location System operator that 
the event has occurred. 

10 Third, each TLP chassis oontairiSTedundatU power supplies, fims, aixl other coirqxments. 
A TLP chassis can also sqipcfft multiple DSP modules, so thai the failure of a single 
DSP module or even a single DSP on a DSP module reduces die overall amount of 
processing resources available but does not cause the failure of the TLP chassis. In all of 
the cases described in this paragraph, the failed component of the TLP 12 can be 

1 5 replaced without placing the entire TLP chassis into off-Une status. For example, if a 
single power supply fails, the redundant power supply has sufBcient edacity to singly 
si^iport the load of the chassis. The failed power siqiply contains the necessary circuitry 
to remove itself &wi the load of the chassis and not cause further d^radation in the 
chassis. Similarly, a failed DSP module can also remove itself fitim the active portions of 

20 the chassis, so as to not cause a failure of the backplane or other modules. This enables 
the remainder of the chassis, including the second DSP module, to continue to function 
normally. Of course, the total processing throughput of the chassis is reduced but a total 
&ilure is avoided. 

25 Application Processor (AP) 14 

The AP 14 is a centralized database system, comprising a number of software 
processes that manage the entire Wireless Location System, provide interfaces to 
external users and applications, store location records and configurations, and supptort 
varioiis appUcation-related functionality. The AP 14 uses a commercial hardware 

30 platform that is sized to match the throughput of the Wireless Location System. The AP 
14 also uses a commercial relational database system (RDBMS), which has been 
significantly customized to provide the functionaUty described herein. While the SCS 10 
and TLP 1 2 preferably operaletogedieTaii a purely real tfaiie basis to d^ennine location 
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and create location records, the AP 14 can operate on bofh a real time basis to Store and 
forward location records and a non-real time basis to post-process location records and 
provide access and r e portin g over time. The ability to store, retrieve, and post-process 
locatioQ records fiir various types of system and qiplication analysis has proven to be a 
powerfid advantage of the present inventioiL The main collectiim of software processes 
is known as Oei^iCore. viiidi is shown in Figure 4 and includes the following 



The AP Performance Guardian (j^PeriGuard) is a dedicated software process that is 
10 responsible fivstartiiig. stopping, and monitoxing roost other ^Core processes as weU 
as ApCore communicati<ms wldi the NOC 16. Upon receiving a configuration update 
ty«T7Tniar»H fiom tfac NOC. Ai^erfGnard i^idates fiie database and notifies all other 
processes of the change. ^PeifiSuard starts and stops app ropriate processes -wbtxi the 
NOC directs the ApCore to enter specific run states, and constantly monitors other 
15 software processes scheduled to be rumung to restart them ifthey have exited or 

stopping and restarting any process that is no longer property respoiuling. ApPerfGuard 
is assigned to one of the highest processiiig priorities so that this process cannot be 
blocked by another process that has "run aw^. ApPerfGuard is also assigned dedicated 
memory that is not accessible by other software processes to prevent any possible 
20 coiTtq>tion from other software processes. 

The AP Dispatcher (ApMnDsptch) is a software process thai receives location records 
bam the TLP's 12 and forwards the location records to other pnaccsses. This process 
contains a separate thread for each physical TLP 12 configured in the system, and each 

25 thread receives location records fiom that TLP 12. For system reUabiUty, the ApCore 
mflifitai'ng a list containing the last location record sequence number received from each 
TLP 12, and sends this sequence number to the TLP 12 upon initial connection. 
Thereafter, the AP 14 and the TLP 12 maintain a protocol whereby the TLP 12 sends 
each location record with a unique identifier. ApMnDsptch forwards location records to 

30 multiple processes, including Ap91 1, ApDbSend. ApDbRecvLoc, and ApDbFileRccv. 

The AP Tasking Process (ApDbSend) controls the Tasking List within the Wireless 
Location System. The Tasking List is die master list of aU of the trigger criteria that 



deteomnes whidi wireless transmitten will be located, which qiplicalions created the 
criteria, and viaeh qq;)lications can receive location lecoid inform atioiL The ^DbSend 
process contains a sq>arate thread for each TLP 12, over v^iidi the ApDbSend 
synchronizes the Tasking List with the Signal of Interest Table on each TLP 12. 
ApIASend does not send triplication information to the Signal of Interest Table , only 
the trigger criteria. Thus the TLP 12 doesnotknow why awirdesstraDsnnttormustbe 
located. The Tasking List altews wireless transmitters to be located based upon Mobile 
Identity Number (MIN), Mobile Station Identifier (MSID), Electronic Serial Number 
(ESN) and other identity numbers, dialed sequences of characters and / or di^ts, home 
System ID (SIDX originadng cdl site and sector, origiiiatmg RF diannel, or message 
type. The Tastdog List allows moltiple i^Ucatiotts to receive location records from the 
f^ajnt* wireless transmitter. Thus, a sin^ locatian record fiom a wireless tiansmitta- that 
has dialed "911'* can be sent, for exanqile, to a 91 1 PSAP, a fleet management 
qiplicaticm. a traffic management qjpUcation. and to an RF optimization appUcation. 

The Tasiking list also contains a variety of flags and field fin- each trigger criteria, some 
of which are described elsewhere in this qiecificatioa. One flag, for example, qiecifies 
the Tpaximum time Umit befi»e which the Wireless Location System must provide a 
rough or final estimate of the wireless transmitter. Another allows location 
processing to be disabled for a particular trigger criteria such as the identity of the 
wireless transmitter. Another field contains the sufhentication required to make dianges 
to the criteria for a particular trigger; authentication enables the operator of the Wireless 
Location System to specify which appUcations are authorized to add, delete, or make 
changes to any trigger criteria and associated fields or flags. Another field contains the 
Location Grade of Service associated with the trigger criteria; Grade of Service indicates 
to the Wireless Location Systan the accuracy level and priority level desired for the 
location processing associated with a particular trigger criteria. For example, some 
appUcations may be satisfied with a rough location estimate (perhaps for a reduced 
location prcxressing fee), while other appUcations may be satisfied with low priority 
processing that is not guaranteed to complete for any given transmission (and which may 
be pre-empted for high priority processing tasks). The Wireless Location System also 
includes means to support the use of wildcards for trigger criteria in the Tasking List. For 
example, a trigger criteria can be entered as "MIN 215555****". This will cause the 
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Wireless Location System to trigger locatioa processing for any wireless transmitter 
whose NON begins with the six digits 21SSSS and ends with any following four digits. 
The wildcard characters can be placed into any position in a trigger criteria. This featnre 
can save on the number of memory locations reqiiired in the Tasking list and Signal of 
5 Interest Table by groiqiing blocks ofrelaled wireless transmitters togeOier. 

ApDbSend also supports dynamic tasking. Fen- example, the MIN. ESN, MSID, or other 
identity of any wireless transmitter that has dialed "91 1" will automatically be placed 
onto the Tasking List by ^DbSend for one hour. Thus, ai^ fiirtha transmissions by the 

10 wireless transmitter that dialed *^1 1 " will also be located in case of further emergency. 
For example, if a PSAP calls back a wireless fransmitter that had dialed "911" within the 
last hour, the Wireless Location System will trigger on the page re^nsc message from 
the wireless transmitter, and can make this new location record available to the PSAP. 
This dynamic tasking can be set for any interval of time after an initiation event, and for 

1 5 any type of trigger criteria. The ApDbSend process is also a server for receiving tasking 
requests from other applications. These applications, such as fleet management, can send 
tasking requests via a socket connection, for example. These applications can cither 
place or remove trigger criteria. ApDbSend conducts an authentication process with each 
application to verify that that the appUcation has been authorized to place or remove 

20 trigger criteria, and each application can only change trigger criteria related to that 
applicatioiL 

The AP 91 1 Process (Ap9l 1) manages each interface between the Wireless Location 
System and E9-1-1 network elements, such as tandem switches, selective routers, ALI 

25 databases and/or PSAPs. The Ap9 1 1 process contains a s^arate thread for each 

connection to a £9-1-1 network element, and can support more than one thread to each 
network elenent. The Ap91 1 process can simultaneously operate in many modes based 
upon user configuration, and as described herein. The timely processing of E9- l-l 
location records is one of the highest processing priorities in the AP 14, and therefore the 

30 Ap91 1 executes entirely out of random access memory (RAM) to avoid the delay 

associated with first storing and then retrieving a location record from any type of disk. 
When ApMoDsptch forwards a location record to Ap911, Ap911 immediately makes a 
loutiiig deternmiation and forwards the location record over the appropriate mtcr&ce to a 
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E9-1-I network element. A separate process^ operating in parallel, records the location 
record into the AP 14database. 

The AP 14, tbiou^ the Ap91 1 process and other processes, si^ports two modes of 
5 providing location records to efq>licatioos, inchidir^ E9-I -1 : "push" and "fniW modes. 
Applications requesting pnsb mode recdve a location record as soon as it is available 
fiom the AP 1 4. Tlus mode is especially effective for E9- I-l which has a very time 
critical need for location records, since E9-1-I networks must route wireless 9-1-1 calls 
to the correct PSAP within a few seconds after a wireless caller has dialed "91 1". 
1 0 Applications requesting pull mode do not atttom^caUy receive locaticm records, bttt 
rather must send a query to the AP 1 4 regarding a particular wireless transmitter in order 
to receive the last, or any other location record, about the wireless transmitter. The query 
fiom the plication can ^wcify the last location record, a series of location reconb« or 
all location records meeting a specific time or other criteria, such as type of transmission. 
15 An cxanq>le of the use of pull mode in the case of a "91 1" call is the E9-1-1 network first 
receiving the voice portion of the "91 1" call and then querying the AP 14 to receive the 
location record associated with that call. 

When the y^l 1 process is connected to many E9-1-1 networks elements, i^91 1 must 
20 determine to which E9-1-1 network element to push the location record (assuming that 
"push" mode has been selected). The AP 14 makes this detcnnination using a dynamic 
routing table. The dynamic routing table is used to divide a geographic region into cells. 
Each cell, or entry, in the dynairuc routing table contains the routing instructions for that 
cell. It is well known that one minute of latitude is 6083 feet, which is about 365 feet per 
25 millidcgrcc. Additionally, one miimte of longitude is cosine(latitude) times 6083 feet, 
which for the Philadelphia area is about 4659 feet, or about 280 feet per millidegree. A 
table of size one thousand by one thousand, or one million cells, can contain the routing 
instructions for an area that is about 69 miles by 53 miles, wiiich is larger than the area of 
Philadelphia in this exarr^le, and each cell could contain a geographic area of 365 feet 
30 by 280 feet The number of bits allocated to each entry in the table must only be enough 
to siqjport the maximum number of routing possibilities. For example, if the total number 
of routing possibilities is stxteea or less, then tiie memory for the dynamic routing tiible 
is one million times finir bits, or onfr4ialf megabyte. UsiQg diis schema an area the size 
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of Pennsylvania oouU be contained in a table of q;^iroxiinalefy twenty megabytes or 
less, with ample touting possibilities available. Given the relatively inexpensive cost of 
memory, this inventive (b^namic routing table provides flie AP 14 witii a means to 
quickly push the tocation records for "91 1" calls only to ttie a^ipropriate E9-1-1 network 
5 element 

The AP 14 ^lowseadieiiliym dynamic routing to be populated using manual or 
automated means. Using the automated means, for example, an electronic map 
applic^on can create a polygon definition of the coverage area of a specific E9-1-1 
1 0 network element, such as a PSAP. The polygon definition is then translated into a list of 
latitude, longitude points contained within the polygon. The dynamic routing table cell 
corresponding to each latitude, longitude point is then given the routing instruction for 
that E9-1-1 netwoik element Qiat is ceqxmsible for that geographic polygorL 

15 When the Ap91 1 process receives a "911" location record for a specific wireless 

transmitter, Ap91 1 converts the latitude, longitude into the address of a specific cell in 
the dynamic routing table. Ap91 1 then queries the cell to determine the routing 
instructions, which may be push or pull mode and the identity of the £9-1-1 network 
element responsible for serving the geographic area in which the "911" call occurred. If 

20 push mode has been selected, then Ap91 1 automatically pushes the location record to 
that E9-1-1 network clement. If pull mode has been selected, then Ap91 1 places the 
location record into a circular table of "9 1 1" location records and awaits a query. 

The dynamic routing means described above entails the use of a geogr^hically defined 
25 database that may be s^lied to other q>plicatioiis in addition to 91 1 . and is therefore 
supported by other processes in addition to Ap91 1 . For example, the AP 14 can 
automatically determine the billing zone fijom which a wireless call was placed for a 
Location Sensitive Billing ^plication. In addition, the AP 14 may automatically send an 
alert when a particular wireless transmitter has entered or exited a prescribed geographic 
30 ma. defined by an application. The use of particular geographic databases, dynamic 
routing actions, any other location triggered actions are defined in the fields and flags 
associated with each trigger oiteria. The Wireless Location System includes means to 
easily manage Ihese geogrqitaically defined databases nsing an electronic map that can 
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create polygons encompassiiig a prescribed geogr^ihic area. The Wireless Locati<m 
System extracts fiom the electronic rasp a table of latitude, longitude points contained 
witii the polygOTL Each a|q;>lication can use its own set of polygmis, and can dc^ne a set 
of actions to be taken wbea a location record for a triggered wireless transmission is 
5 contained within each polygpn in the set 

The AP Database Receive Process (ApDbRecvLoc) receives all location records from 
ApMnDsptch loa shared memory, and places the location records into the AP location 
datahirw; V^iDbRecvLoc starts ten threads that eadi retrieve location records from 

10 shatedmeDDory, validate each record before iiiseitiiig the records mto the database, arid 
tiien inserts tiie records into the cmiect location record partition in the database. To 
preserve integrity, location records witii any type of error are not written into the location 
record database but are instead placed into an error file that can be reviewed by the 
Wireless Location System operator and then manually entered into the database after 

1 5 error resohitioiL If the location database has failed or has been placed into off-line status, 
location records are written to a flat file where they can be later processed by 
ApDbFileRecv. 

The AP File Receive Process (ApDbFileRecv) reads flat files containing location records 
20 and inserts the records into the location database. Flat files arc a safe mechanism used by 
the AP 14 to completely preserve the integrity of the AP 14 in all cases except a 
complete faihrre of the hard disk drives. There are several different types of flat files read 
by ApDbFileRecv, including Database Down, Synchronization, Overflow, and Fixed 
Error. Database Down flat files are written by the ApDbRecvLoc pnx:ess if the location 
25 database is temporarily inaccessible; this file allows the AP 14 to ensure that location 
records are preserved d\iring the occurrence of this type of problon. Synchronization flat 
files are written by the ApLocSync process (described below) when transferring location 
records between pairs of redundant AP systems. Overflow flat files are written by 
ApMnDsptch when location records are arriving into the AP 14 at a rate faster than 
30 ApDbRecvLoc can process and insert the records into the location database. This may 
occur during very high peak rate periods. The overflow files prevent any records fiom 
bdng lost during peak periods. The Fixed Error flat files contain location records that 
had errors but have now been fixed, and cannow be inserted into the location database. 
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Because the AP 14 has a critical ceatnlizcd role in the vnieless Location System, the 
AP 14 architecture has been designed to be fiilly redundant. A redundant AP 14 system 
includes fiilly redundant hardware platfonns, fhlly redundant RDBMS, redundant disk 

5 drives, and redundant netwoilcs to each other, the TLP's 1 2, the NOC's 16, and external 
applications. The software anddtecture of the AP 14 has also been designed to siqiport 
fault tolerant redundancy. The following exanqples illustrate fimctionality si^iported by 
the redundant AP's. Each TIP 12 sends location records to both the primaiy and the 
redundant AP 14 when both AP's are in an online state. Only die primary AP 14 will 

10 process incoming taddng requests, and only the primary AP 14 will accept configuiatioD 
change requests fipom the NOC 16. The primary AP 14 then synchronizes the redundant 
AP 14 under care&l control. Both the primary and redundant AP's will accept basic 
Startup and shutdown commands fiom tfie NOC. Both AP's constantly monitor their own 
system parameters and i^iplication health and numitor the coxiesponding parameters for 

15 the other AP H and that decide vinch AP 14 will be primary and which will be 
redundant based upon a composite score. This composite score is determined by 
compiling ciTors reported by various processes to a duredmenuny area, and monitoring 
swap space and disk space. There are several processes dedicated to supporting 
redundancy. 

20 

The AP Location Synchronization Process (ApLocSync) runs on each AP 14 and detects 
die need to synchronize locatitxi rec<»ds between AP's, and Oien oeates "sync record^* 
that list the location records that need to be transfened &om one AP 14 to another AP 14. 
The location records are then transfened between AP's using a socket connection. 

25 ApLocSync compares the locatton record partitions and the location record sequence 
numbers stored in each location database. Normally, if both the primary and redundant 
AP 14 are operating pixspcrly, synchronization is not needed because both AP's are 
receiving location records simultaneously from the TLP's 12. However, if one AP 14 
fails or is placed in an ofif-Iine mode, then synchronization will later be required. 

30 ApLocSync is notified whenever ApMnDsptch connects to a TLP 12 so it can determine 
whether synchronization is reqmied. 
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The AP Tasking Synchronization Process (ApTaskSync) runs on each AP 14 and 
syncfaronizea tiic taslditg information between the primary AP 14 and the redundant AP 
14. ApTaskSync on the primary AP 14 receives tasking information from ApDbSend. 
and then sends the tasking information to the ApTaskSync process on the redundant AP 
S 1 4. If the primary AP 14 were to fbil before i^TaskSync had completed replicating 
tasks, then ApTaskSync will perform a complete tasking database synchronization when 
die foiled AP 14 is placed back into an online state. 

The AP ConfiguiBtion Synchninizatiim Process (ApConfigSync) tuns on each AP 14 and 
1 0 ^yndntmizcs the configuration information b^ween the primary AP 1 4 and the 

redundam AP 14. ApConfigSync uses a RDBMS rqification facility. The configuration 
information includes all information needed by the SCS*s 10, TLP's 12, and AP's 14 for 
proper operation of tfie Wireless Location System in a wirdess carrier's network. 

15 bi addition to the can flmcticms described above, me AP 14 also sui^iorte a tar^ 

of processes, functions, and interfaces useful in the operation of the Wireless Location 
System, as well as usefid fin- various plications that desire location information. While 
dw processes, fimctions. and interftcea descrS>ed herein are in this section pertaining to 
die AP 14, the inqilementation of many of diese processes, functions, and interfaces 

20 perineates the eiitireV^less Location ^rstem arid diereforedieiruiveniive value should 
be not read as being limited only to die AP 14. 

Roaming 

TheAP 14 supports **roamin^* between wiidiess location systems located in 

25 different cities or operated by different wireless carrienLlfa first wireU»traiismitter has 

subscribed to an application on a first Wireless Location System, and therefore has an 

entry in the Tasking List in the first AP 14 in tfie first Wireless Location System, then the 

first wireless transmitter may also subscribe to roaming. Each AP 14 and TLP 12 in each 

Wireless Location System contains a table in \^ch a Hst of valid "home" subscriber 

30 identities is maintained. The list is typically a range, and for exan^le, for current cellular 

telephones, the range can be determined by the NPA/NXX codes (or area code and 

exchange) associated with the MIN or MSID of cellular telephones. When a wireless 

transmitter meeting die "hDme" criteria nuikes a transmissiwi, a TLP 12 receives 
-56- 



PCTAJS02AW754 



WO 03/00961 J 



FCT/IIS02AMI754 



demodulated data finm one or more SCS's 10 and chedcs die trigger information in the 
Signal of Interest Table . If any trigger criterion is met, the location processing b^ins on 
that transmission; otherwise, die transmisrim is not processed by the Wireless Location 



When a first wireless transnutter not meeting die liome" criterion makes a transmission 
in a second V^eless Location System, the second TLP 12 in the second Wireless 
Location System checks the Signal of InterastT^iie for a trigger. One of diree actions 
then occurs: ® if die transmission meets an already egia ttng criteria in the Signal of 

10 bteiest Table, die ttan8iiutl» is located and the location record is fmivardedfixmi the 
second AP 14 in die second Wireless Location System to the first AP 14 in the first 
Wireless Location System; (tO if die first irireless transmitter has a "roamer" entry in die 
Signal of Interest Table indicating that the first wireless transmitter has 'Vegistered" in 
die second Wireless Location System but has no trigger criteria, tben the transmission is 

15 not processed by the secotid '\nnxeless Location System and the esqiiration tiniestamp is 
adjusted as described below; Oii) if the first wireless transmitter has no "roamor^ entry 
and therefijrehas not "rqiistered'*. dten die demodulated data is passed frnn die TLP 12 
to die second AP 14. 



second Wireless Location System as being registered without trigger criteria, and the 
seccmdAP 14 is not required to make additional queries to the first AP 14. 

When the second AP 14 registers the first wireless transmitter widi a roamer entry in the 
Tadctng list and the Signal of Interest Table with or widioot trigger criteria, the roamer 
entry is assigned an cxfir^on timestamp. The e]q>iration timestamp is set to the current 
time plus a predetermined first interval Every time die first wireless transmitter makes a 
transmission, die eaqnration Hmw^awip of die roamer entry in the Tasking List and the 
Signal of Interest Table is adjusted to the cunent time of the most recent transmission 
plus die predetermined first interval. If the first wireless transmitter makes no fbrdier 
transmissions pricu' to dw expiration tiniestanqi'of its roamer entry, dien die roamer entry 
is automatically deleted It, subsequent to the ddetion, the first wireless transmitter 
makes another transmission, then the process of registering occurs again. 

Thefixst AP Handseeoi^AP 14 maintain conmiunications over a wide area networic. 
Thenetworit m^ be based upon TCP/IP or upon a protocol similar to the most recem 
version of IS-41 . Each AP 14 in communications with odicr AP's in odier wireless 

intains a table that pnmdes the identity of each AP 14 and Wireless 



20 In die diird case above, the second AP 14 uses the identity of die first wireless 
transmitter to identify die first AP 14 in the first Wireless Location System as the 
liome** yfixcless Location System of the first wireless transmitter. The second AP 14 in 
the second Wirclcsa Location System sends a query to the first AP 14 in the first 
V%eless Location System to determine whether the first wireless transmitter has 

25 subscribed to any locaxim ^plication and therefore has any trigger criteria in the 
Tasking List of the first AP 14. If a trigger is present in the first AP 1 4, the trigger 
criteria, along with any associated fields and flags, is sent &oni the first AP 14 to the 
second AP 14 and entered in the Tasking Ust and the Signal of Interest Table as a 
"roamer" entry wiOi trigger criteria. If the first AP 14 responds to the second AP 14 

30 indicating that die first wireless transmitter has no trigger criteria, then the second AP 1 4 
"registers" the first wireless transmitter in the Tasking List and the Signal of Interest 
Table as a "roamer^' with no trigger criteria. Thus both current and future transmissioiis 
fiom dw first wireless transmitter can be positively identified by the TLP 12 in the 



Location System corresponding to each valid range of identities of wirdess transmitters. 

20 

Multiple Pass Location Records 

Certain iqiplications may require a vexy 1^ estimate of the general location of a 
wireless transmitter, followed by a more accurate estimate of the locaticm that can be sent 
subsequently. This can be valuable, for example, for E9-1-1 systems that handle wireless 

25 calls and must make a call routing decision very quickly, but can wait a fitde longer for a 
more exact location to be displayed upon the E9-1-1 call-taker's electronic map terminaL 
The W^less Location System siqiports these qiplicaticms with an inventive multiple 
pass location processing mode, described later. The AP 14 supports this mode with 
multiple pass location records. For certain entries, the Tasking List in the AP 14 contains 

30 a flag indicating the maximiun time limit before which a particular application must 

receive a rough estimate of location, and a second maximum time limit in which a 

particular application must receive a final location estimate. For these certain 

plications, die AP 14 includes a flag in the location reccxd indicating the status of die 
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location estimate contained in ttie record, which may, fiir example, be set to first pass 
estimate (i.e. lou^) or final pass estimate. The Wireless Location System will generally 
determine the best location estimate widiin the time limit set by the sgiplication. tiuit is 
the Wireless Location System will process the most amount of RF data that can be 

S sapponed in the time limit Given tiiat any particular wireless transmission can trigger a 
location record for one or more qiplications, tfie Wireless Location System supports 
nmltiple modes sinniltaneonsly. Fca^ example, a wireless t r ansmitte r with a particular 
MIN can dial "91 1". This nuy trigger a two-pass location record for the E9-1-1 
application, bat a single pass location record for a fleet managemoit application that is 

10 monitoring Uiat particular MIN. This can be extended to any number of applications. 

Multiple Demodulation and Triggers 

In wireless communications systems in urban or dense suburban areas, 
frequencies or channels can be re-used several times within relatively close distances. 

15 Since (he W^less Location System is capable of independently detecting and 

demodulating wireless transmisrions without the aid of the wireless communicatitms 
system, a single wireless transmission can frequentiy be detected and successfully 
demodulated at multiple SCS's 10 witinn the Wheless Location System. This can happen 
both intentionally and unintentionally. An unintentional occurrence is caused by a close 

20 frequency re-u^ such that a particular wireless transmission can be received above a 
predetermined threshold at more tiian one SCS 1 0, when each SCS 10 believes it is 
monitorrng only transmissions that occur only within die cell site collocated with the 
SCS 10. An intentional occurrence is caused by prognimmiiig nK»e than one SCS 10 to 
detect and demodulate transmissions that occur at a particular cM site and on a particular 

25 fi«iuency. As described earlier, this is generally used with adjacent or nearby SCS's 10 
to {Hovide system demodulation redmidancy to fiirther increase the probability that any 
particular wireless transmission is suecessfiil detected and demodulated. 

Either type of event could potentially lead to multiple triggers within the Wireless 
30 Location System, causing location processing to be initiated several times for the same 
transmission. This causes an excess and incfEcient use of processing and 
communications resources. Therefore, die Wireless Location System includes means to 
detect vfbcn the same transmissioo has been detected and demodulated more than once, 
-59- 



WO 03/1)09613 



PCT/US02/<«»754 



and to select the best demodulating SCS 10 as tfie starting point for location processing. 
What die Wireless Location System detects and successfixlly demodulates the same 
transmission muhipie times at multiple SCS/antemias, the Wireless Location System 
uses the following criteria to select the one demodulating SCS/anteima to use to continue 
the process of determining whetiicr to trigger and possibly initiate location processing 
(again, these criteria may be weighted in determining the final decision): (i) an 
SCS/anterua collocated at the cell site to which a particular finequency has been assigned 
is pr e f e r red over another SCS/antenna, bm this preference may be adjusted if there is no 
operating and on-line SCS/antenna collocated at the cell site to which the particular 
finequeney has beoi assigned, (ii) SCS/antennas with higher average SNR are preferred 
over those with lower average SNR. and (iii) SCS/antennas with fewer bit errors m 
donodulatiiig the transnussion are prefored over those witii higher bit errors. The 
weighting applied to each of these preferences may be adjusted by the operator of the 
^A^tess Location System to suit the particular deagn of each system. 

Interface to Wireless Communications System 

The Wireless Location System contains means to communicate over an interface 
to a wireless commimicatiims syston, such as a mobile switching center (MSC) or 
mobile poationing controller (MFC). This interface may be based, for example, on a 
standard secure protocol such as die most recent version of the IS-41 or TCP/IP 
protocols. The formats, fields, and authenticatiim aspects of diese protocob are well 
known. The >A^less Location System siqiports a variety of command / response and 
infinmational messages over tins interface diat are designed to aid in the successfid 
detection, demodulation, and triggering of wireless transmissions, as well as providing 
means to pass location records to the wireless oommunicatioiis system. In particular, ttiis 
inter&ce provides means fat die Wireless Location System to obtain information about 
which wireless transmitters have been assigned to particular voice cbarmd parameten at 
particular cell sites. Example messages supported by the Wireless Location System over 
tiiis interfice to the wireless communicatioiis ^stem inchide the followir^ 

Query on MIN / MDN /MSID / IMSI / TMSI Mapping - Certain ^es of wireless 
transmittas will transmit their identic in a ^miliar form that can be dialed over die 
telephone netwock. Other types of wireless transmitters transmit an idaaity that 
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cannot be dialed, but which is translated into a munber that can be dialed using a 
table inside of the wireless communications system. The transmitted identity is 
permanent in most cases, but can also be temporary. Users of location applications 
connected to the AP. 14 typically prefer to place triggers onto the Tasking List using 
identities that can be dialed. Identities that can be dialed ate typically known as 
Mobile Directoiy Numbers (MDN). The other types of identities for which 
translation may be required includes Mobile Identity Number (MIN), Mobile 
Subscriber Identity (MSIDX lotematimial Mobile Subscriber Identity (IMSI). oad 
Tenqwiary Mobile SubsciSier Identity (TMSI)i If the wireless communicaticms 
system has ensdiled the use of easetyption fin- any of the data fields in the messages 
transmitted by wireless transmitters, the 'Wreless Location System may also query 
for encryption infixmation along witii the identity information. The Wireless 
Location System includes means to query the wireless eomrmmicotions system for 
the altecnate identities fijr a trigger identity dial has been placed tmto ttte Tasking List 
by a location application, or to query the wireless communications system for 
alternate identities for an identity that has been demodulated by an SCS 10. Other 
events can also trigger this type of query. For this type of query, typically the 
Wireless Locatim System initiates the command, and the wdreless cormnunications 
system responds. 

Query / Command Chaiige on Voice RF Channel Assignment - Many wireless 
transnussions on vmce channels do not contain identity information. Therefore, when 
the Wireless Location System is triggered to perfinm location procesriog on a voice 
chaimel transmission, the Wireless Location System queries the wireless 
communication system to dbtxca the current voice channd assignment information 
for the particuko- transmitts fixr which the- Wireless Location System has been 
triggered. For an AMPS transmission, for example, the Wireless Location System 
preferably requires the cell site, sector, and RF channd number currenUy in use by 
the wireless transmitter. For a TDMA transmission, for example, the Wireless 
Location System preferably requires the cdl site, sector, RF chaimel number, and 
timeslot currently in use 1^ the wireless transmitter. Other information elements dial 
may be needed includes long code mask and encryption keys. In general, the 
Wireless Location System wil} initiate the conmiand, and the wireless 
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communications system will respond. However, the Wirdess Location System will 
also accept a trigger command bom the wirdess comnranications system that 
contains the information detailed herein. 

5 The timing on this command / response message set is very critical since voice 

channel handoQs can occur quite frequently in wireless communications systems. 
That is, the Wireless Location System will locate any wireless transmitter that is 
transmitting on a particular channel — therefore the Wireless Location System and the 
wirdess commuiucatioiis system nmst jointly be certain that the identity of the 

1 0 wirdess transmitter awti the voice fhnn?^* assigrunent information are in perfect 

synchronization. The Wireless Location System uses several means to achieve this 
objective. The Wirdess Location System m^, for exan^le, query the voice channd 
^l 5 i^ g^^ment information fiir a particular wireless tnuutmitter, receive the necessary RF 
data, then again query flie voice diannd assignment information for that same 

15 wirdess transmitter, and then verify that die status of the wirdess tiransmiuer did not 
chaitge durii^fhe timein whidi tfie RF data was being collected by the Wireless 
Location System. Location p roc ess ing is not required to complete before the second 
query, since it is only important to verify that tite correct RF data was recdved. The 
'Wirdess Location System may also, for example, as part of the first query command 

20 the wireless communications system to prevent a handoff fi^m occurring for the 

particular wirdess transmitter during the time period in which the Wireless Locatimi 
System is recdviqg the RF data. Then, subsequent to collecting the RF data, the 
WHrdess Location System will again query the voice channd assignment information 
for that same wireless transmitter, command the wireless cormnunications system to 

25 agoin peimit lumdofis for said wirdess transmitter and dien verify that die status of 
the wireless transmitter did not diange during the time in which the RF data was 
bdng collected by die Wireless Location System. 

For various reasons, dthv file ^^less Location System or the wireless 

30 commuiucations system may prefer that the wireless transmitter be assigned to 

anodier voice RF channel prior to performing location processing. Therefore, as part 

of the command / response sequence, the wireless cormnunications system may 

instruct the Wireless Location System to temporarily suspend location processing 
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until the wireless communicatioiis systan has completed a handoffsequence with the 
wireless transmitter, and the wireless conunuoications system has notified the 
Wireless Location System that RF data can be received, and the voice RF channel 
upon which the data can be received. Alternately, the Wireless Location System may 
5 detemune that the particular voice KF channel which a particular wireless transmitter 
is cuncntly using is unsuitable for obtainhig an accqitable location estimate, and 
request that the wireless communicatioDS system command the wireless transmitter 
to haodofr. Alternately, ttie 'W^eless Locatioti System may request that the wireless 
communiealions systan command the witeless transmitter to handofTto a series of 
10 voice RF channels in sequence in order to perfonn a series of location estimates, 
wher^ the Wireless Location System can isqmve nptm the accuracy of the 
location *f*i'*i«*'^ tbroi^ the series of handofGi; this method is lurther described 



The Wireless Location System can also use fiiis command / reqionse message set to 
query Ute wireless conununicaticais system dbout the identity of a wireless transmitter 
that had been using a particular voice channet (and timeslot, etc) at a particular cell 
site at a paiticniar time. This enables On Wireless Location System to first perform 
location processing on tzsnsmissioos without Imowing the identities, and then to later 
detezmine the identity of the wireless tiansmitteis making the transmissions and 
append this infonnation to die location record. This particular inventive feature 
enables the use of automatic sequential locaticm of voice diamiel transmissions. 

Receive Triggers -The Wireless Location System can receive triggers from the 
wireless commmicaticiu ^stem to perfbim location ptocesang on a voice channel 
transmission without knowing ttie identity of the wireless transmitter. This message 
set bypasses the Tasking List, and does not use the triggering mechanisms wittiin the 
Vnreless Locaticm System. Rattier, the wtrdess communiealions system alone 
detominesiit^ch wireless transmissions to locate, and then send a command to the 
'^^eless Location Systan to collect RF data from a patticnlar voice channel at a 
particular cell site and to perform location processing. The Wireless Location SysLon 
responds with a oonfinMOion containing a timestamp vbsn die RF data was 
collected The Wireless Location System also responds with an appropriate format 
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location record when location processing has completed. Based upon (he time of the 
command to Wireless Location System and the response with the RF data collection 
timestamp, the wireless communications system detennines whether the wireless 
transmitter status changed subsequent to the command and whether there is a good 
5 probability of successful RF data collection. 

Make Transmit - The Wireless Location System can command the wireless 
communications system to force a particular wireless transmitter to make a 
transmission at a particular time, or within a prescribed range of times. The wireless 

10 communications system teqxmds with a confiimation and a time or time range in 
v/iach to expect the transmission. The types of transmissions that the Wireless 
Location System can fiarce include, fiir example, audit responses and page reqionses. 
Using this message set, die Wireless Location System can also command the wireless 
comnumications system to ibicc ttic wireless transmitter to transmit uang a higher 

IS power level setting. In nuDV cases, wireless transmitters will attenqit to use the 
lowest power level settiiigs when transmitting in order to conserve battery life. In 
Older inqnove the accuracy of die location estimate, die Wireless Location System 
may prefer that the wireless transmitter use a higher power levd setting. The wireless 
communications system will resp<md to the Wireless Location System with a 

20 confirmation that the hi^ia power level setting will be used and a time or time range 
in which to expect the transmission. 

Delay ^Mess Commimicatiwis System Reqxmse to Mobile Access - Some air 
interfile protocols, such as CDMA, use a mechanism in which die wireless 
25 transmitter initiates transmissions on achamiel, such as an Access Channel, for 

exanqile, at the lowest or a very low power level setting, and then entos a sequence 
of steps in which (i) the wireless transmitter makes an access transmission; (iQ the 
wireless transmitter waits for are^wnse from the wireless communications system; 
f^m) if no response is received by die wireless transmitter from the wireless 
30 coimiiunications system widnn a predetermined time, die wirdess transmitter 

increases its power level setting by a predetermined amount, and then returns to stqi 
0); (iv) if a response is received by die wireless transmitter fiom the wireless 

s system widiin a predetermined time, the wireless transmitter then 
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enters a nomial message exchange. This mechanism is usciul to ensure that the 
wireless transmitter uses only the lowest useful power level setting for transmitting 
and docs not fiirthcr waste energy or battay life. It is possible, however, that the 
lowest power level setting at which the wireless transmitter can succ^fiilly 
communicate with the wireless communications system is not suiBcient to obtain an 
acceptable location estimate. Therefore, the Wueless Location System can command 
the wirdess communications system to delay its response to these tiimsmissions by a 
predetennined time or amount This delaying action will cause the wireless 
transmitter to rqieat die seqiwaice of stq» 0) dnough (iii) one or more times than 
normal widi the result that one or more of the access transmissions will be at a higher 
powa* level than nomi&L The higher power level may preferably enable the Wireless 
Location System to detennine anme aocnxate location estimate. The Wireless 
Location System may comomand this type of delaying action for either a particular 
wirdess transmitta, far a particular type of wireless transmission (for example, for 
all '9ir calls), for wireless tiansmitterB (hat are at a q>ecified range fiom the base 
station to which the transmitter is attemptiog to communicate, or for all wireless 
transmitters in a particular area. 

Send Confirmation to Wireless Transmitter -The Wireless Location System does not 
include means within to notify the wireless transmitter of an action because die 
Wrdess Location System cannot transmit; as described eariier die Wireless Location 
System can (mly receivo transmissions. Therefore, if the Wireless Location System 
desires to send, for example, a confiimation tme iqjon the completion of a certain 
action, the TKHrdess Location System commands the wireless communications 
^stem to transmit a particular message. The message may include, for example, an 
audible ocmfiim^on tone, spoken message, or synthesized message to the wireless 
transmitter, or atext message sent via a short messaging service or a page. The 
Wireless Location System receives confimiatioa from the wireless communications 
^tem that the message has been accqited and sent to die wireless transmitter. This 
ccmimand / response message set is impoitsnt in jgmhiing the Wireless Location 
System to siqi^wrt certain end-user application fonctiona such as Prohibit Location 
Processing. 
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Report Location Records - The Wireless Location System automatically rqjorts 
location records to the wireless communications system for those wireless 
transmitters tasked to report to the wireless communications system, as well as for 
those transmissions that the wireless communications systan initiated triggers. The 
5 Wireless Location System also rqports on any historical location record queried by 
the wireless communications system and which the wireless communications system 
is authorized to receive. 

Mointor Internal Wireless Communications System Interfaces, State Table 

10 In addition to this above interface between the Wireless Location System and the 

wireless communications system, the Wireless Location System also includes means to 
moiutor interfiles widun the wireless communications system for the purpose of 

intercepting miftssagffff important to the Wireless Location System for identifying wireless 
transmitten and the RF diannels in use by these transmitters. These interfaces may 

IS include for example, dw **a-interface** and **a-bis interface** used in wireless 

oommunicatirais systems employing the GSM air interfoce protocoL These interfaces are 
wdl-known and published in various standards. By monitoring the bi-directional 
messages on these interfaces between base stations (BTS), base station controllers 
(BSC), and mobile switching centen (MSQ, and other poiitts, the Wireless Location 

20 System can obtain die same infbmiation about the assignment of wireless transmitters to 
specific channels as die wireless communications system itsdf knows. The V^less 
Location System includes means to mcnutor these interfaces at various points. For 
exanqile, die SCS 10 may monitor a BTS to BSC interface. Altemately, a TLP 12 or AP 
14 may also monitor a BSC where a number of BTS to BSC interfaces have been 

25 concentrated. The interfaces internal to the wireless communications system arc not 
encrypted and the layered protocols are known to those familiar with the art The 
advantage to the Wireless Location System to monitoring diese inteifoces is that die 
Wireless Location System may not be required to indqiendently detect and demodulate 
control channel messages firom wireless transmitten. In addition, the Wireless Location 

30 System may o 
interfaces. 
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Using these means for a control channel transmission, the SCS 10 receives the 




communications system. The Wireless Location System also si^jports similar functions 




transmissions as described earlier and records the control chimnci RF data into memory 




widi systems based vptnx odier air interfoces. 




without performing detection and demodulation. Separately, the Wireless Location 








System monitors the messages occurring over prescribed interfaces within the wireless 




For certain air interfaces, such as CDMA, the Wireless Location System also keeps 


5 


communications system, and causes a trigger in the Wireless Location System when the 


5 


certain identity information obtained from Access bursts in the control channel in the 




Wireless Location System discovers a message containing a trigger event. Initiated by 




State Table; this information is later used for decoding the masks used for voice 




the trigger event, the Wireless Location System determines the approximately time at 




channels. For example, the CDMA air interface protocol uses the Electronic Serial 




which the wireless transmission occuired, aiul commands a first SCS 1 0 and a second 




Number (ESN) of a wireless transmitter to, in part, determine the long code mask used in 




SCS lOB to each search its memory for the start of transmission. This first SCS lOA 




the coding of voice channel transmissions. The Wireless Location System maintains this 


10 


chosen is an SCS that is either collocated with the base station to vnidch the wireless 


10 


information in the State Table for entries in the Tasking List because many wireless 




transmitto- had communicated, or an SCS which is adjacent to die base station to vlnch 




transmitters may transmit die information only once; for example, many CDMA mobiles 




the wireless tmnstnitter bad communicated, That is, ifae first SCS lOA is an SCS that 




will only transmit their ESN during the first Access burst after the wireless transmitter 




wouMIuve been assigned the coiAolchaimel as a pximaiy channel. IfthefiistSCS IQA 




become active in a geogr^hic area. This ability to iiidq}eadendy determine the long 




successfully detennines and rqioits die start of the tFansimssion» ttien location processing 




code mask is very usefiil in cases where an inter&ce between the Wireless Location 


IS 


proceeds noimally, using the means described below. If the first SCS lOA cannot 


15 


System and the wireless communications system is not operative and/or the Wireless 




siiccessfultydetennine the start oftransmission, then the seooiid SCS IQB reports (he 




Location System is not able to monitor one of die tnter&ces internal to the wirdess 




start of transmission, and dien tocstion processing proceeds nonnally. 




communicadons system. The operator of the Wireless Location System may optionally 








set the Vl^reless Location System to ifiaifitam the identity information for all wireless 




The Wireless Location System also uses these means for voice chaimd transmissions. 




tiansmxtten. In addition to the above reasons, the Wireless Location System can fnovide 


20 


For all triggers contained in IliBTasldns List, the >K^less Location System monttots the 


20 


the voice chatmet tracking fnr all wireless transmitters that trigger location processing by 




prescribed tnter&ces fiir messages pertaiiung to those triggers. The messages of interest 




calling "^1 r*. As described eariier, dw Wireless Location System uses ttynamic tasking 




include^ fix* example, voice rharmr-^ assignment messages, handoET messages, fiequency 




to provide loc^on to a wireless transmitter for a presciibed time after dialing '911**, for 




hopping messages, power up / power down messages, directed re-try messages. 




example. By maintaiiiing die identity infoimation for all wireless transmitten in die State 




termination messages, and other similar action and status messages. The Wireless 




Tabl^ die Wireless Location System is able to provide voice channel tradang for all 


25 


Location System contnniously maintains a copy of the state and status of these wireless 


25 


transmitters in the event of a prescribed triggs event, and not just those with prior 




transmitters ia a State Table fai the AP 14. Each time that the Wireless Location System 




entries in die Talking List 




detectt a message peitaintns to one of the entries in the Tasking List, die ^ftOrcless 








Location System updates its own State Table. Thereafter, the >A%eless Location System 




Applications hiterface 




may trigger to perfram location processing, such as on a regular time interval, and access 




Usiiig die AP 14, the Wireless Locaticm System supports a variety of stmidards 


30 


die State Table to detenntne precisely «4iich cell site, sector, RF chaimel, and timeslot is 


30 


based interfaces to endnisei and carrier location qplic^ons using secure protocols sudi 




presently being used by the wireless transmitter. The exanqile contained herein described 




as TCP/IP, X.25. SS-7, and IS-41. Each ii^erftce between die AP 14 and an external 




die means by which die Wireless Location System interfaces to a GSM based wireless 




application is a secure and authenticated connection that pennits die AP 14 to positively 








verify the identity of the qiplicatian that is connected to the AP 14. This is necessary 
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because each connected ^iplication is granted only limited access to location records on 




locate the wireless transmitter. The Wireless Location System uses its interface to the 




a real-time and/or historical basis. In addition, the AP 14 supports additional command / 




wireless contmimications system to query status of the wireless transmittei, including 




response, real-time, and post-processing fonctions that are fiirther detailed below. Access 




voice call parameters as described earlier. If the wireless transmitter is engaged on a 




to these additional fimctions also requires authentication. The AP 14 maintains a user list 




voice channel, then the Wireless Location System performs location processing. If the 


5 


and the authentication means associated with each user. No ^>plication can gain access 


5 


wireless transmitter is not engaged in any existing transmissions, die Wireless Location 




to location records or fimctioiis for which the application does not have proper 




System will command the wireless communications system to make the wireless 




authentication or access rights. In addition, the AP 14 supports full logging of all actions 




transmitter immediately transmit. When the <tynamic task is set, the Wireless Location 




taken by each application in the event that problems arise or a later investigation into 




System also sets an ciqiixatian time at wdiich die dynamic task ceases. 




actions is required. For each command or function in the list bdow, the AP 14 preferably 






10 


si^qx^ts a protocol in which each action or the result of eadi is comfiimed, as 


10 


End-User Addition / Deletion - This command can be executed by an end-user of a 




sppxopastB. 




wireless transmitter to place the identity of the wireless transmitter onto the Tasking List 








with location processing enabled, to remove the identity of the wireless transnutter from 




Edit Tasking List - This command pemuts external aiqilicaiions to add, remove, or edit 




the Tasking List and thereforo eliminate identity as a trigger, or to place the identity of 




entries in the Taskiiig List, inctndiiig any fidds and fl^ associated with each entiy. 




the wireless transmitter onto the Tasking List with location processing disabled. When 


15 


This command can be supported on a single entry basis, or abatch entry basis where a 


IS 


location processing has been disabled by the end-user, known as Prohibit Location 




list of entries is included in a single command. The latter is useful, for example, in a bulk 




Processing then no location processing will be pexfbtmed for the wireless transmitter. 




application such as locatiim sensitive biUing D^erdiy larger vohunes of wireless 




The operator of the Wireless Location System can optionally select one of several 




transmitters are being suppcotedby die external application, and it is desired to minimize 




actions by die Vnureless Location System in respcmse to a Prohibit Location Processing 




protocol overhead. This cominaiul can add or delete plications for a particular entry in 




command by the end usen Cl) the ^iffaVitrg ^tiim can override all other triggers in die 


20 


the Tasking List, however, this command cannot delete an entry entirely if die entry also 


20 


Taslring List, inchidixig a bigger due to an emergency call such as "911", (ii) the 




contains other implications not associated with or authorized by the application issuing 




disabling action can override any odier trigger in the Tasking List, except a trigger due to 




die command. 




an emergency call such as "91 1**, (iii) the disabling action can be overridden by other 








select triggers in the Tasking List In the first case^ die end-user is granted complete 




Set Location Interval -The Wireless Location System can be set to perform location 




control over die privacy of the transmissioiis by the wireless transmitter, as no locati<Hi 


25 


processing at any interval for a paitieular wireless transmitter, oo either control or voice 


25 


processing will be performed on diat transmitter for ai^ reastm. In the second case, the 




channels. For example, certain applications may require the location of a wireless 




end-user may still receive the benefits of focation during an emergency, but at no other 




transmitter every few seconds when the transmitter is engaged on a voice channel. When 




times. In an example of die third case, an en^Ioyer ^^lo is the real owner of aparticular 




the wireless transmitter make an initial transmission, the Wireless Location System 




wireless transmitter can override an end-user action by an enq>loyee wbo is uang the 




initially triggers using a standard entry m the Tasking List If one of the fields or flags in 




wireless transmitto' as part of the job but v^so may not desire to be located. The Wireless 


30 


this entry qiecifies updated kication on a set interval, dien die Wireless Location System 


30 


Location System may query the wireless cotnmunications system, as described abov^ to 




creates a dynamic task in die Tasking List diat is triggered by a timer instead of an 




(Atain die mapping of the identity contained in die wireless transmission to other 




identity or other transmitted criteria. Bach time the timer expires, which can range firom 1 




identities. 




second to several hours, the Wireless Location System will automatically trigger to 
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The additions snd deletions by the end-user are effected by dialed sequences of 
characters and digits and pressing the "SEND" or equivalent button on the wireless 
transmitter. These sequences may be optionally chosen and made known by the operator 
of Qie Wireless Location System. For example, one sequence may be "*5S SEND" to 
S disable locatioa processing. Other sequences are also possible. When the end-user can 
dialed this prescribed sequence, the wireless transmitter will transmit the sequence over 
one of the prescribed control chamiels of the wireless communications system. Since the 
V^^less Location System independently detects and demodulates all reverse omltDl 
channel transmissions, the Wireless Location System can indq>etidently interpret the 

10 prescribed dialed sequence and make the apprc^ate feature updates to the Tasking List, 
as described above. When die Wireless Locatim System has completed the t^ate to the 
Tasking List, the Wireless Location System commands the. wireless commmiicatioiis 
system to send aconfinnation to the end-user. As described earlier, this may take the 
fbnn of an audible tone, recorded or syntfiesized voice, or a text message. This command 

15 is executed over the tnterfitce between the Wireless Location System and the wirdess 



Command Transmit - This command allows external applications to cause the Wireless 
Location System to send a command to the >vireless communications system to make a 

20 particnlar wireless transmitter, or group of wireless transmitten, transmit. This command 
may contnn a flag or field that the wireless txansmitta<8) should transmit immediately or 
at a prescribed time. This command has the effort of k>cating the wireless transmittet(s) 
upon command, since the transmissians will be detected, demodulated, and triggered. 
c^maip g location pfocessiag and the ge u a ati onof a location record. This is useful in 

25 eliminatingorreducingany delay in determining location such as waiting for the next 
registration time period for the wireless transmitter or waiting for an independent 



External Database Query and Update- The Wireless Location System includes means to. 
30 accessanextemaldatabasevtoqueiy the said extenial database using the identity of the 
wireless transmitter or other parameters contained in the transmission or die trigger 
critoia. and to merge the data obtained fiom the external database widi die dau 

generated by the Wiiekss Location System to create a new enhanced location record. 
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The enhanced location record may then be forwarded to requesting applications. The 
external database may contain, for example, data elements such as customer infonnation. 
medical information, subscribed features, qiplication related information, customer 
accotmt infonnation, contact information, or sets of prescribed actions to take upon a 
5 location trigger event. The Wireless Location System may also cause updates to the 
external database, for example, to increment or decrement a billing cowitcr associated 
with the provision of location services, or to update the external database with the latest 
location record associated with the particular wireless transmitter. The Wireless Location 
System contains means to perform the actions described heretn on more than one 
10 external database. The list and sequence of external databases to access and the 
subsequent actions to take are contained in one of the fields contuned in the trigger 
criteria in the Tasking List 

Random Anonymous Location Processing - The Wireless Location System includes 
15 means to perfcxm large scale random anonymous location processing. This fonction is 
valuable to certain ^pes of applicationa that require the gathering of a large volume of 
data about a population of wireless transmitters without consideration to the specific 
identities of the individual traasmitteis. Aj^lications of this type include: RF 
OptimTzatTon, which enables wireless carriers to measure the perfcxmance of the wireless 
20 communications system by simultaneously detenmning location and other parameters of 
a transmission; Traffic Management, wfaicfa enables government agencies and 
eonameicial c o ncerns to monitor the flow of traiCc on various highways using 
statistically significant samples of wireless transmitters travelling in vehicle^ and Local 
Ttaf&c Estimation, ^x4rich enables commercial enterprises to estimate the flow of trafBc 
25 around a particular area which msQrhe%» determine die viabiHty of particular btisinett 

Applications requestiiig random anonymous loca t i o n inocessing <^tionaIly receive 
location records from two sources: (0 a copy of location records generated for atber 
qjplicatioiis. and (lQ Ujcatianrectxds which have been triggered randomly by the 
30 V^dess Location System widiout regard to aiQr^ieciiic criteria. All of die k>cation 
records generated from either source are forwarded with all of the identity and trigger 
criteria infonnation removed from the location records; however, the reqiuating 
appIication(8) can determine whether the record was generated from the fully random 
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process or is a copy fiom another trigger criteria. The random location records are 
generated by a low priority task within the Wireless Location System ttiat p e rf o rm s 
location processing on randomly selected transmissions whenever processing and 
commtmicatioQS resources are available and would otherwise be unused at a particiilar 
instant in time. The requesting spplication(5) can specify \i^ether the random location 
processing is performed over the entire coverage area of a Wireless Location System, 
over ^lecificgeogrqihic areas such as along prescribed highways, orby diecovet^ 
areas of specific cdl sites. Thus, the requesting ^plication(s) can direct the resources of 
the Wireless Location System to those area of greatest interest to each application. 
Depending on dw randomness desired by die q>plicatioQ(sX die Wireless Location 
System can aiQust preferences for randomly selecting certain types of transmissions, for 
i, registration messages, origination messages, page reqxmse messages, or voice 



IS Anonymous Tracking of a Geographic Grotip- The Vl^reless Location System includes 
means to triggo^ location processing on a repetitive basts for anonsnnunis groups of 
wireless transmitters witlun a presoibed geogrqifaic area. For example, a particular 
location iqipltcation may desire to monitor the ttavel route of a wireless transmitter over 
a prescribed period of time, but without the Wireless Location System disclosing the 

20 particular identic of die wireless transmitter. The period of time may be many hours, 
days, or weeiks. Usbg die means, die Wireless Location System: randomly selects a 
wireless transmitter that initiates a transmission in the geographic area of interest to the 
^jpKcation; performs location processing on the transmission of interest; irreveraibly 
translates and encrypts the identity of the wireless transmitter into a new coiled identifier; 

25 creates a location record using only die new coded identifier as an identifying mean^ 
forwards the location record to the requesting location application(s); and creates a 
dynamic task in die Tasking List for die wireless transmitter, wherein the dynamic task 
has an associated expiration time. Subsequently, «4ieaever the prescribed xirirdess 
transmitter initiates transmission, the Wireless Location System shall trigger using the 

30 dynamic task, perform location processing on the transmission of interest, izrevetsibly 
translate and enoTpt the identity of the wireless transmitter into (he new coded identifier 
using (he same means as prior such diat die coded identifier is ±e same, create a location 
record using the coded identifier, and forward the location record to the requestii(g 
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location qipIicationCs). The means described herein can be combined with other 
functions of die Wireless Location System to perform this type of monitoring use either 
control or voice channel transmissions. Further, the means described herein completely 
l^eserve the private identity of the wireless transmitter, yet enables another class of 
5 applications that can monitor the travel patterns of wireless transmitters. This class of 
applications can be of great value in determining the planning and design of new roads, 
alternate route planning, or the construction of commercial and retail ^ace. 

T.'Ocatififi Record Grotqiing, Sorting, and Labeling - The Wireless Location System 

10 indode means to post-process the location records for certain requesting qjpUcations to 
gioiqi, sort, or label the location records. For each interface supported by the Wireless 
Location System, die Wireless Location System stores a i^file of the types of data for 
wfaicfa the qjplication is bodi attthotized and requesting, and die types of filters or post- 
processing actions desired by the ai^Iication. Many qiplications, such as die examples 

15 contained herein, do not require individual k>cation records or die specific identities of 
individual transmitters. For example, an RF optimization supplication derives more value 
from a large data set of location records for a particular cell site or channel than it can 
finm any individual location reoonL For another example, a tra£Qc momtoring 
application requires onty location records from transmitters that are <xi prescribed roads 

20 or highways, and additif»iaUy requires that these records be grouped by section of road 
or highway and by direction of travel. Other qiplications may request diat the Wireless 
Location System forward location records that have been formatted to eaihance visual 
di^lay tppeal by, for example, adjusting the location estimate of the transmitter so that 
(he transmitter's location appears on an electronic map directty on a drawn road segment 

25 ratter than adjacent to the road segment Therefore, the Wireless Location System 
preferably **snaps" the locatira estimate to the nearest drawn road sc^;meot. 

The Wireless Location System can filter and rqxnt location records to an qiplication for 
wireless transmitters communicating onty on a particular cell site, sector. RF channel, or 
30 group of RF channels. Before forwarding die record to die requesting plication, the 

Wireless Location System first verifies that the appropriate fields in (he record satisfy the 
requirements. Records not matching the requirements are not fwwarded, and records 
matdimg die requirements are forwarded. Some filters are geographic and must be 
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calculated by the Wireless Location System. For example, the Wireless Location System 
can tirocess a location record to determine the closest road segment and direction of 
travel of the wireless tmnsmitter on the road segment The Wireless Location System can 
then fcHward only lecoids to ttie application that are detennined to be on a particular road 
S segment, and can fiirtber enhance the location record by adding a iield containing the 
detennined road segment In order to determine the closest road segment, the Wireless 
Location System is provided with a database of road segments of interest by the 
requesting applicadon. This database is stored in a table vAtcrc each road segment is 
stored with a latitude and longitude coordinate defining the end point of each segment. 

10 Each road sqKment can be modeled as a straight or carved line, and can be modeled to 
stqjport one or two directions of tiavd. Then for each location record detemiiiMd by the 
Wireless Location System, the lA^reless Location System conq>ares the latitude and 
longitude in the location record to each road sclent stored in the database, and 
dctomines the shortest distance from a modeled line ctmnccting the end points of the 

1 5 segment to the latitude and kn^tude of the location record. The shortest distance is a 
calculated imaginBiy line orthogonal to the line connecting the two end p<nnt8 of the 
stored road segment When the closest road segment has been determined, the Wireless 
Locatiom System can futther detemdne the direction of travel on the road segment 
comparing the ^rectitm of travel of the wireless transmitter reported by the location 

20 processing to the orientation of the road segment The directitm that produces the 

smallest enor with reqiect to the orientation of the road segments is then reported by the 
Wireless Location System. 

Network Operations Console (NOC) 16 

25 Hie NOC 16 is a netwoik management system that pomits operators of the 

Wireless Location System easy access to the pro g r amming pazametets of the AAnreless 
Location System. For exan^Ie, in some dtie^ fhe 'Vt^reless Location System may 
contain many hundreds or evoi thousands of SCS's 1 0. The NOC is the most effective 
wqr to manage a laige WIrdess Location System, using grqihical user intcr&ce 

30 capabilities. The NOC also receive real time alerts if certain fimctions within tiie 

Wireless Locaticm System are not operating properly. These real time alerts can be used 

by the operator to take coirective action quickly and prevent a degradation of locaticm 

service. Ejiperience with trials of the Wireless Location System show Oat the ability of 
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the system to maintain good location accuracy over time is directly related to the 
(^iCTator's ability to keep fhe system operating within its predetennined parameters. 

Location Processing 

5 The Wireless Location System is capable of performing location processing using 

two different methods known as central based processing and station based processing. 
Both techniques were first disclosed in Patent Nmnber 5,327,144, and are further 
enhanced in this specification. Location processing depends in part on the ability to 
accurately detemiine certain phase charactciistics of the signal as received at multiple 

10 antennas and at multiple SCS's 10. Therefore, it is an object of the Wireless Location 
System to identify and temove sources of phase enoz that impede the ability of the 
location processing to determine the phase characteristics of the received signal. One 
source of phase error is inside of the wireless transmitter itseli; namely the oscillator 
(typically a crystal oscillator) and the phase todt loops that allow the phone to tune to 

1 S BpeaSc diannels for transmitting. Lower cost crystal oscillators will generally have 

higher phase noise. Some air interface qiecifications, sudi as IS-136 and IS-9SA, have - 
ipecifications covering the phase noise with niuch a wireless tdephone can transmit - 
Other air interface specifications, such as IS-5S3 A. do not closely specify phase noise. It 
is therefore an object of the present invention to automatically reduce and/or eliminate a 

20 wireless transmitter's phase noise as a source of phase error in location processing, in 
part by automatically selectiog the use of central based processing or station based 
processing. The automatic selection will also consider the eificieDcy with which the 
communications link between titeSCS 10 and fhe TLP 12 is used, and the availability of 
DSP resources at each of tiw SCS 10 and TLP 12. 

25 

When using ceidral based processing, the TDOAand FDOA detenninaticm and the 
multipalh processing aie perfiormed in the TLP 12 along with the position and speed 
detennination. This method is prefetred when the wireless transmittor has a jriiase noise 
tiiat is above a pradeteimined threshold. In tiiese cases, central based {nooessiog is most 
30 efiective in reducit^ or eliminating the phase noise oftiiewirdess transmitter as a 
source of phase error because tiie TDOA estimate is performed using a digital 
representation of the actual RF transmission from two antennas, which may be at the 
same SCS 10 or different SCS's 10. In this mediod, those skilled in the art wiU recognize 
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tiiat the phase noise of the transmitter is a common mode noise in the TDOA processing, 
and therefore is self-canceling in the TDOA determination process. This method works 
best, for eK&mple, with many very low cost AMPS cellular telephones that have a high 
phase noise. The basic steps in central based processing include die stqjs recited below 
5 and represented in the flowchart of Figure 6: 

a wireless transmitter initiates a transmission on either a control channel or a voice 
channel (step S50); 

the transmission is received at multiple antennas and at multiple SCS's 10 in the 
10 Wireless Location System (step S5 1); 

the transmission is converted into a digital fbimat in the receiver connected to each 

SCS/antcnna (stq» SS2); 
tiie digital data is stored in a memoiy in the receives in each SCS 10 (stq> S53X 
the transmission is demodulated (step S54); 
1 S ttw Wireless Location System determines whether to begin location processing for the 
transnrissiwi (st^ SS5); 
if triggoed. the TLP 12 requests copies of the digital data fiom the memoiy in 

receivers at multipte SCS*s 10 (stq> S56}; 
dig^ data is sent from multiple SCS's 10 to a selected TLP 12 (stq) SS7); 
20 the TLP 12 perfbrms TDOA, FDOA. and nmltqiaai mitigation on the digital date fiom 
pairs of antennas (step SS8); 
the TLP 12 performs position and qieed detennination using the TDOA data, and then 
creates a location record and forwards the location record to the AP 14 (step SS9). 

25 The Wireless Location System uses a variable number of bits to lepresenl the 

transmission when sending digital data fiom the SCS's 10 to the TLP 12. As discussed 
earlier, the SCS receivo' digitizes wireless transmissions with a high resolution, or a high 
number of bits per digital 8aiiq}le in order to achieve a sufScient dynamic range. This is 
especially required vrhen using wideband digital receivers, which may be simultaneously 

30 rcceiviog signals near to the SCS lOA and fisr from the SCS IQB. For exaiiq>le, iqi to 14 

bits may be required to rep r e s e n t adynamic range of 84 dB. Location processing does 

not always require the high resolution per digital sample, however. Frequently, locations 

of sufiScient accuracy are achievable by the Wireless Location System using a fewer 
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numbcr of bits per digital sample. Therefore, to minimize the implementation cost of the 
Wireless Location System by conserving bandwidth on the communication Knks 
between each SCS 10 and TLP 12, the Wireless Location System determines the fewest 
number of bits required to digitally represent a transmission while still maintaining a 
5 desired accuracy level. This determination is based, for example, on the particular air 
interface protocol xised by the wireless transmitter, the SNR of the transmission, the 
degree to which the transmission has been pertuibed by fading and/or multipath, and the 
current state of the processing and ccrmnimication queues in each SCS 10. The mmnber 
of bits sent fiom the SCS 10 to the TLP 12 are reduced in two ways: the nmnber of bits 

10 per sample is minimized, and the shortest length, or fewest segments, of the transmission 
possible is used for location processing. The TLP 12 can use this m i n i m al RF data to 
perform location processing and then compare the result witii the desired accuracy level. 
This comparison is performed on the basis of a confidence interval calculation. If the 
location does not fall within the desired accuracy limits, the TLP 12 will 

15 recursively request additional data fiom selected SCS's 10. The additional data may 
include an additional number of bits per digital sample and/or may include more 
segments of the tranamissioiL This process of requesting additional data may continue 
recursively until the TLP 12 has achieved die prescribed location accuiacy. 

20 lltere are additioiial details to the bask steps described above. These fletails are 
described in prior Patent Nomben 5,327,144 and 5,608,410 in other parts of this 
qiecification. One enhancement to the processes described in earlier patents is the 
selection of a single reference SCS/antemu that is used for each baseline in tiie location 
processing. In inior art, baselines were deteimined using pairs of antenna sites around a 

25 riitg. In the presem Wireless Location System, the single reference SCS/antcnna used is 
goierally die highest SNR signal, although odier criteria are also used as described 
below. The use of a high SNR reference aids centia] based location processtng when die 
other SCS/antemus used in the location processing are very weak, such as at or below 
the noise floor (i.e. zero or negative signal to noise ratio). When station based location 

30 processing is used, the reference signal is a ro-modulated signal, whidi is intentionally 
created to have a very high signal to noise ratio, fiather aiding location processing for 
very weak signals at other SCS/antennas. The actual selection of the reference 
SCS/antenna is described below. 
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The Wireless Location System mitigates multipath by first recursively estimating the 
ccMnponents of multipath received in addition to the direct path component and then 
subtracting these components from the received signal. Thus the Wireless Location 
S System noodds the received signal and compares the modd to the actual received signal 
and attempts to minimize the difference between tiie two tising a weighted least squ^ 
difTerence. For each transmitted signal x(t) fiom a wireless transmitter, the received 
signal y(t) at each SCS/antenna is a conqilex combination of signals: 

10 y(t)-2:x(t-T0aBe'^"\fiiralln-«0toN; 

vfhm x(t) is tiie signal as transmitted by the wireless transmitter; 
Sb and Tb axe die complex amplitude and delays of the multipaiOi components; 
N is the total number of nuitttpatb componmts in the received agnal; and 
15 ao and T6 are ccfflstants fOT the most direct path con^ionenL 

The operator of the Wireless Location System empirically detennines a set of constraints 
for each component of multipath that qiplies to the specific environment in which each 
Wireless Location System is operating. The pmpose of the constraints is to limit the 

20 amount of processing time that the Wireless Location System q>eDds optimizing the 
results for each multipath mitigation calculation. For example, the Wireless Location 
System may be set to determine only four components of multipath: the first component 
may be assumed to have a time delay in the range T|a to tib; the second component 
may be assumed to have a time delay in the range Xia to -C2b; the third component may 

25 be assumed to have a time delay in the range tsa to xsb; and similar for the fourth 

component; however the fourth component is a single value that effectively represents a 
complex combination of many tens of individual (and somewhat diffuse) multipath 
components whose time delays exceed the innge of the third component For ease of 
processing, the Wireless Location System transforms the prior equation into the 

30 frequency domain, and then solves for the individual components such that a weighted 
least squares difiercnce is mtnimized. 
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When using station based processing, the TE)OA and FDOA determination and multipath 
mitigation are performed in the SCS's 10, while the position and speed determination are 
typically performed m the TLP 12. The main advantage of station based processing, as 
described in Patent Nmnber 5,327,144, is reducing the amount of data that is sent on the 
5 communication link between each SCS 10 and TLP 12. However, there may be other 
advantages as well. One new objective of the present invention is increasing the effective 
signal processing gain during the TDOA processing. As pointed out eariier, central based 
procesdng has the advantage of eliminating or reducing phase enor caused by the phase 
noise in the wireless transmitter. However, no previous disclosure has addressed how to 
10 eliminate or reduce the same phase noise enor when using statim based processing. The 
present invention reduces the phase error and increases the effective signal processing 
gain using the steps recited below and shown id Figure 6: 

a wireless transmitter initiates a transmission an either a control channel or a voice 
15 4±annel (step S60); 

the transmission is received at multiple antennas and at multiple SCS's 10 in the 

Wreless Location System (st^ S6\y, 
the transmission is ccmveited into a digital format in the receiver connected to each 
antenna (step S62); 
20 the digital data is stored in a menuny in the SCS to (step S63); 
the transmission is Hemnrfiiiiitari (step S64); 

the Wireless Location System detemines whether to begin location processmg for the 

transmission {step S65); 
if triggered, a first SCS lOA demodulates the transmission and determines an 
25 ap p r o p riate phase correction interval (8tq> S66); 

for each such phase correction interval, the first SCS lOA calculates an appropriate 

phase oonrection and anqjlitude cotrection, and en c iKies this phase coirectifm 

parameter and amplitude correction parameter aloqg with the demodulated data (step 

S67y. 

30 the demodulated data and phase correction and anylitnde coirection parameters are 
seat fiom the first SCS IQAtoaTLP 12(stepS68); 
the TLP 12 determines dte SCS's 10 and receiving antennas to use in the location 
(stepS69); 
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the TLP 12 sends the demodulated data and phase c 



parameteis to each second SCS 1 OB that will be used in Ihe location iKocessing (step 

S70); 

the first SCS 10 and each second SCS lOB creates a first re-modulated signal based 
5 vpoD the demodulated data and the phase correction and an:q)litude conecti<m 
parameters (step S71); 

the first SCS lOA and each second SCS lOB perficnms TDOA, FDOA, and multipath 
mitigation using the digital data stored in memoiy in each SCS 10 and the first re- 
modulated signal (step S72); 
10 the TDOA, FDOA, and muhqiaai mitigation date are sent fiom the first SCS 1 OA and 
each second SCS ICB to the TLP 12 (stq> S73>; 

the TLP 12 perfomis position and speed detennination using the TDOA date (step 
S74):8nd 

the TLP 12 arestes a locatfon record, and forwards the location record to ttie AP 14 
IS (step S7S). 

The advantages of detemuning phase correction and an^litude correction para m et er s are 
most obvious in the location of d^fA wireless transmitters based i^on 1S-95A. As is 
well known, the reverse transmissions fiom anlS-95A transmitter are sent using non- 
20 coherent modulation. Most CDMA base stations only integrate over a single bit interval 
because of the non-coherent modulation. For a CDMA Access Channel, with a bit rate of 
4800 bits per second, there are 256 cliq>s sent per bit, vibich pemiite an integration gain 
of 24 dB. Using ttie technique described above^ the TDOA processing in each SCS 10 
may integrate, for example, over a fiUl 160 milhseeond burst (196,608 chips) to produce 
25 an integration gain ofS3dB. This additional jKOcessiAg gain enables the present 

invention to detect and locate CDMA transmissions using multiple SCS's 10, even if the 
base stetions collocated with the SCS's 10 camiot detect die same CDMA transmission. 

For a particular transmission, if either tiie idiase correction parameters or the amplitude 
30 correction paiamriera are calculated to be zero,' or are not needed, then these parameters 
are not sent in order to conserve on the number of bits transmitted on the 
communications link between each SCS 10 and TLP 12. hi another embodiment of Oie 
invention, the Wireless Location System may use a fixed phase correction interval for a 
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particular transmission or for all transmissions of a particular air interface protocol, or 
for all transmissions made by a particular type of wireless transmitter. This may, for 
exaix^le, be based vpcaci empirical data gathered over some period of time by the 
V^reless Location System showing a reasonable consistency in the phase noise exhibited 
5 by various classes of transmitten. In these cases, the SCS 10 may save die processing 
step of detemuning the ap p ropri ate phase correction intervaL 

Those skilled in the art will recogmze that there are many ways of measuring the phase 
noise of a wireless transmitter. In one embodiment, a pure, noiseless re-modulated ooj^ 

10 of the signal received at the first SCS 1 OA may be digitally generated by DSP's in the 
SCS, then the received signal may be compared against the pure signal over each phase 
correction interval and the phase difference may be measured directly. In (his 
embodiment, the phase correction parameter will be calculated as the negative of the 
phase difference over that phase conection intervaL The number of bits required to 

IS represent the phase correction parameter will vary with the magnitude of the phase 

correction parameter, and the number of bits may vary for each phase correction mterval. 
It has been observed that some transmissions, for example, exhibit greater phase noise 
early in the transmission, and less phase noise in die middle of and later in the 



20 

Stetion based processmg is most usefii] for wireless transmitters that have relatively low 
phase noise. Although not necessarily required by their respective air interftce standards, 
wireless telqihoncs that use (he TDMA, CDMA, or GSM protocols will typically exhibit 
lower phase noise. As the phase noise of a wireless transmitter increases, the laigth of a 

25 phase coirection interval may decrease and/or the number of bits required to represent 
the phase correction parameters increases. Station based procesang is not efifective when 
the number of bits required to represent the demodulated date phis the phase correction 
and amphtude parameters exceeds a predetermined proportion of the number of bite 
required to perform central based [ooeessing. It is therefore an object of the present 

30 invention to automatically determine for each transmission for xtrinch a location is 
desired Aether to process the location using central based process 



processing. The st^ in makittg tlus determination are redted below and shown r 
Figure?: 
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a wireless transmitter initiates a transmission on either a control channel or a voice 

channel (8tq> S80); 
the ttansmission is received at a first SCS lOA (step S8i); 

the transmission is converted into a digital fixrmat in the receiver connecled to each 
antenna (stqi S82); 

the Wireless Location System detomines v^ietber to begin location processing for the 

transmission (stq> S83); 
if triggered, a ftist SCS lOA demodulates the transmission and estimates an ap (M o priate 

phase correctton interval and the mmiber of bits required to encode the phase 

correction and amplitude correction parameteis (step S84); 
the first SCS lOA then estimates ihe number of bits required for central based 

processmg^ 

based iqxm the mimber of bits required for each respective mefliod. the SCS 10 or the 
TLP 12 determine whether to use central based processing or station based 
processing to perform ttie location processing for diis transmission (stqi S8S). 

In another embodiment of the invention, the Wireless Location System may always use 
central based processing or station based processing for all transmissions of a paittcular 
air interface protocol, or for all transmissions made by a particniar kiiid of wireless 
transmitter. This may, for example, be based upon enq)irica} data gathered over some 
period of time by tfw Wireless Locatim System dMwing a reasonable consistency in die 
phase noise exhibited by various classes of transmitters. In these cases, the SCS 1 0 
and/br the TLP 12 may be saved the processing step of detennimng the appmpi iate 
pfoccssmg tnethod. 



A fmther enhancement of the present invention, used for both central based processing 
and station based processing, is die use of threshold criteria for including baselines in the 
final detemunation of location and velocity of die wireless transmitter. For each baseline. 
30 the Wireless Location System calculates a number of parameters that include: tiie 

SCS/antemia port used with the reference SCS/aotenna in calculating the baseline, foe 
peak, average and variance in the power of the transmission as received at the 
SCS/antenna port used in the baseline and over the interval used for location processing. 
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In the present inq>lementation, the ^^reless Location System also uses another alternate 
form of the equation that can aid in determining location solutions 'v^ien the reference 
signal is not very strong or when it is likely that a bias would exist in the location 
solution using the prior fonn of the equatioo: 

LSD* - 2 CTDOAw - xC^*- b* Z w?: over all i-0 to N-1 



Where N niunber of SCS/antamas used in the location processii^: 
TDOAa - the TOOA to the i*^ site from reference site 0; 
TDOAoo ^ is to be zero; 

ti - foe foeoretical line of sight propagation time fiom the wirdess 
site; 

b abias foat is separately calculated for each foeorettcal point foat 
that theoretical point; and 

Wi *■ foe weight, or quality foctor, applied to foe i*^ baseline. 



The LSD* form of foe equation offois an easier means of removing a bias in location 
solutions at the r e f erence site by taking vq equal to the maximum value of foe other 
weights m- basing Wo on the relative signal itrengfo at the reference site. Note that if wq is 
20 mudi larger than foe other weights, foenb is approxiniately equal to TO. In general, foe 
weights, or quality foctors are based on similar criteria to foat discussed above for foe 
threshold criteria in including baselines. That is, foe results of foe ciitnia calculations are 
used for weights and when the raiteria falls below threshold foe weight is then set to zero 
and is effectively not included in the determination of the final location sohition. 

25 

Antenna Selection Proceaa for Location Processing 

Pteviotxs inventions and disclosures, such as those listed above, have described 
techniques in which a first, second, or possibly third antenna site, cell site, or base station 
are requited to determine location. Patent number 5,608,410 fhrther discloses a Dynamic 
30 Selection Subsystem (DSS) that is responsible for determining which data frames from 
which antenna site locations win be used to calculate foe location of a responsive 
transmitter. In the DSS, if data frames are received fitun more foan a threshold number 
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foe con-elation value from the cross-spectra correlation between the SCS/antenna used in 
foe baseline and foe reference SCS/antenna, foe delay value for foe baseline, foe 
multipafo mitigation parameters, foe residual values remaining after the multipafo 
mitigation calctilations, foe contribution of the SCS/antetma to foe weighted GDOP in 
5 foe final location solution, and a measure of the quality of fit of foe baseline if included 
in foe final location solution. Each baseline is included in foe final location solution is 
each meets or exceeds foe threshold criteria for each of foe parameters described herein. 
A baseline may be excluded from foe location solution if it iails to meet one or more of 
foe threshold criteria. Therefore, it is frequoitly possible foat foe number of 
10 SCS/antennas actually used in the final location solution is less than foe total o 



Previous Patem Nmnbers 5,327.144 and 5,508,410 disclosed a method by the 
location processing mitriTniTM dje least square difference (LSD) value of the following 



LSD = [Qi2(Defcv_Ti2-DeUyJ>i2)'+ Qi3CDelay_Ti3-Delay_0,3/+. . .+ Q,/Delay_T^ 
DeUy^O^)* 

20 In foe present inq>tementation, this equation has been reaiiaiigBd to foe following form in 
Older to make the location processing code more efificient: 

LSD - £ (TDOAoi - ti + tBi)Vi^ over all i-1 to N-l 

25 ^foereN» number ofSCS/antennas used in the focatkn processing; 
TDOAqi « the TDQA to the site from reference site 0; 

Ti * the theoretical line of sight propagation time from the wireless transmitter to foe i* 
sit^ 

xo » foe foeoretical line of sight prop^ation time from the transmitter to die reference 
30 and 

wi> the wei^it, or quality foctor, qipfied to the i"* baseline. 
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of sites, foe DSS determines which are candidates for retention or exclusion, and foen 
dynamically organizes data frames for location processing. The DSS prefers to use mote 
than foe minimum number of antenna sites so that foe solution is over-determined. 
Additionally, foe DSS assures that all transmissions used in foe location processing were 
5 received from foe same transmitter and from the same transmission. 

The preferred embodiments of foe prior inventions bad several limitations, however. 
First, eifoer only one antenna per antenna site (or cell site) is used, or foe data frnm two 
or four diversity antennas were first combined at foe antenna site (or cell site) prior to 
10 transmission to the central site. Additionally, all antenna sites that received foe 

transmission sent data fiiames to the central site, even if the DSS later discarded foe dato 
frames. Thus, some communications bandwidth may have been wasted sending data that 
was not used. 

1 5 Hie present inventors have determined that while a minimvun of two or three sites are 
required in order determine location, the actual selection of antennas and SCS's 10 to use 
in location procesang can have a significant effect on foe results of the location 
processing In addition, it is advantageous to include foe means to use more than one 
antenna at each SCS 10 in foe location i»Dcessing. The naaoa for using data finm 

20 multiple antennas at a cdH site indqiendently in the location processing is that foe signal 
received at each antenna is uniquety affected by multipath. fading, and other 
distuibances. It is weO known in foe Geld that vfbm two antcnn&i are sqparated in 
distance by more foan one wavelength, then each antenna will receive foe signal on an 
independent path. Therefore, dure is frequently additional and unique infonnatiOT to be 

25 gained about the location of foe wireless transmitter using multiple antennas, and foe 
ability of the Wireless Location System to mitigate multipafo is enhanced accordingly. 

It is foerefore an object of foe present invention to provide an imfvoved method for using 
foe signals received from more foan one antenna at an SCS 10 in foe location processing. 
30 It is a fiirfoer object to provide a mefood to impxove foe dyiunnic process used to select 
foe cooperating antennas and SCS's 10 tised in the location processing. The first object is 
achieved by providing means within foe SCS 10 to select and use any segment of data 
collected from any number of anteniuks at an SCS in the location processing. As 
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described earlier, each antenna at a cell site is connected to a receiver internal to the SCS 
10. Each receiver converts signals received from the antenna into a digital form, and then 
stores the digitized signals tempotarily in a memory m the receiver. The TLP 12 has 
been provided with means to direct any SCS 10 to retrieve segments of data from the 
5 temporary memory of any receiver, and to provide the data for use in location 
pnicessiDg. The second object is achieved by providing means within the Wireless 
Location System to monitor a large mmiber of antennas for reception of the transmission 
tt^at the Wireless Location System desires to locate, and then selecting a smaller set of 
antemias for use in locatios processing based iqxm a predetermined set of parameters. 
10 One exan^ile of this sdection process is represented by the flowchart of Figure 8: 

a wireless transmitter initiates a transmission on either a control channel or a voice 
channel (stqp S90); 

the transmission is received at multiple antennas and at multiple SCS's 10 in the 
IS Wireless Location System (step S91); 

the transmission is converted into a digital fbxnuit in the receiver ccmnected to each 

antenna (step S92); 
the digital data is stored in amemory in each SCS 10 (step S93); 
the transmission is demodulated at at least oiw SCS lOA and the channel number on 
20 which the transmission occuned and the cell site and sector serving the wirdess 
transmitter is detemuned (stqi S94); 
based iqxm die serving cell site and sector, one SCS 1 OA b designated as the 'piimaiy' 

SCS 10 for processing that transmission (step S95): 
the primary SCS lOA determines a timestan^ associated witfi the demodulated data 
25 (step S96); 

Ihe Wireless Locadoo System detemunes wliether to begin location processing for (he 

transmission (stqi S97^ 
if location processing is triggered, the Wirdess Location System detennines a 

fftnvrfiif**" fist of SCS's 10 and antmna* to use in the location processing (st^ S98); 
30 each candidate SCS/antermaiiieasuies and rqwrts several parameten in the channel 

number of the transmission and at the time of the timr^atTg) determined by (he 

primary SCS lOA (step S99); 
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the Wireless Location System orders the candidate SCS/anteimas using spedfied 
criteria and selects a reference SCS/anterma and a processing list of SCS/antennas to 
use in the location processing (step SI 00); and 

the Wireless Location System proceeds with location processing as described earlier. 
5 using data from the processing list of SCS/antennas (step S 101 }. 

Selectinj? Primary SCS/Antenna 

The process for choosing the 'primary' SCS/antenna is critical, because the 
candidate list of SCS's 1 0 and antermas 10-1 is determined in part based upon the 

10 designation of the primary SCS/antenna. When a wireless transmitter makes a 

transmission on a particular RF chaimcl, the transmission frequently can propagate many 
miles before the signal attenuates below a level at which it can be demodulated. 
Therefore, there are frequently many SCS/antennas capable of demodulating the signal. 
This especially occurs is urban and suburban areas where the frequency re-use pattern of 

15 many wireless communications systems can be quite dense. For exanqile, because of the 
big^ usage rate of wireless and the dense cell site spacing, the present inventofs have 
tested wireless communications ^steins in which (he same RF control diannel and 
digital color code were used on cell sites quced about one mile apart Because the 
Wireless Location System is indcpendaitly demodulating these transmissions, the 

20 Wieless Location System frequoitly can demodulate the same transmission a( two, 
three, or more separate SCS/antennas. The Wireless Location System detects diat the 
same transmission has been demodulated multiple times at multiple SCS/antennas when 
die M^rdess Location System receives multq}le demodulated data frames sent from 
different SCS/anteonas, each with a number of bit errors below a predetenniiied bit error 

25 dnedwld, and widi the demodulated data matching within an acoqptable limit of bit 
errors, and all occurring within a predetermined interval of time. 

When the Whclesa Location System detects danodulated data fiom iiuiltq}le 

SCS/antemias, it examines die following parameten to detennine vdiich SCS/antenna 

30 shall be design^ed the primary SCS: average SNR over the traosmission interval used 

for location processing, the variance in the SNR over the same interval, correlation of the 

beginning of die received transmission agmnst a pure pn^ciirsw (i.e. for AMPS, die 

dotting and Baricer code), the number of bit errora in the demodulated data, and die 
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magnitude and rate of change of the SNR from just before the on-set of the transmission 
to the on-set of the transmission, as well as other similar parameters. The average SNR is 
typically dctenoined at each SCS/antenna eithez over the entire length of the 
transmission to be used for location processing, or over a shorter interval. The average 
S SNR over the shorter interval can be determined by performing a correlation with the 
dotting sequence and/or Barker code and/or sync word, dqwnding on the particular air 
interface protocol, and over a short range of time before, during, and after the timestomp 
reported by each SCS 10. The time range may typically be +/-200 microseconds centered 
at the (imestamp, for example. The ^^reless Location System will generally order the 

10 SCS/antennas using fbe following criteria, each of which may be weij^ited (multiplied by 
an appropriate Actor) when combining the criteria to determine die final decision: 
SCS/antennas with a kwer number of bit errors are prefened to SCS/antennas with a 
higher number of bit man, average SNR for a given SCS/antenna must be greater than a 
predetermined flveshold to be designated as die primary; SCS/antennas widi hi^ier 

15 average SNR are prefened over those with lower average SNR; SCS/antennas with 

lower SNR variance are preferred to those widi higher SNR variance and SCS/antennas 
with a faster SNR rate of change at (he on-set of the transmission are preferred to those 
with aslower rate of change. The weighting qiplied to each of Ifaese criteria may be 
adjusted by die cpenSor of die Wireless Location System to suit the particular design of 

20 each system. 

The candidate list of SCS's 10 and antennas 10-1 are selected using a predetennined set 
of raiteria based, for example, upon knowledge of the types of cell sites, types of 
antennas at (he cell sites, geometry of the antennas, and a weightii^ foctor diat weights 

25 certain antennas more than other antcrmas. The weighting fector takes into account 
knowledge of the terrain in whidi the Wireless Location System ia operating, past 
empirical data on the contributian of each antenna has made to good location estimates, 
and odier factors diat may be specific to each diffident WLS mstallatioa In one 
embodiment, &r example, the Wireless Location System may select the candidate list to 

30 include all SCS's 10 17 to a maximum number of sites (max_number_of_sites) diat are 

closer than a predefined maximum radius fiom the primaiy site 

Cmax_radius_fiom_primary). For example, in an tuban m suburban envircmment, 

wherem (here may be a large number of cell sites, the max_nuniber_of,sites may be 
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limited to nineteen. Nineteen sites would include the primary, the first ring of six sites 
surrounding the primary (assuming a classic hexagonal distribution of cell sites), and the 
next ring of twelve sites surrounding the first ring. This is d^icted in Figure 9. In 
another embodiment, in a suburban or rural cnviroimient, max_radius_from_primary 
5 may be set to 40 miles to ensure that the widest possible set of candidate SCS/anlermas is 
available. The Wireless Location System is provided with means to limit the total 
number of candidate SCS's 10 to a maximum number (max_number_candidates), 
aldiougb each crandidate SCS may be permitted to choose the best pott fiom among its 
available antennas. This limits the maximtun time spent by the Wireless Location System 

10 processing a particular location. Max_nuniber_cattdidates may be set to thirty-two, for 
exanqple, which means that in a typical three sector wireless corrunumcations system 
with diversity, up to 32*6 °> 192 total antennas could be considered for location 
processing for a particular transmission. In order to limit the time spent processing a 
particular location, the Wireless Location System is provided with means to limit the 

1 5 number of antennas used in the location processing to tnax_number_antemiasjproces5ed. 
Kfax_number_antennas_processed is generally less dian max_iiumber_candidates. and is 
typically set to sixteea 

^ While (he )K%eles8 Location System is provided with the ability (0 dynamically 
20 determine the candidate list of SCS's 10 and anletmas based i^Kin die predetermined set 
of criteria described above, die Wireless Location System can also store a fixed 
candidate Ust in a td>le. Thus, for each cell ate and sectra- in die wireless 
communications system, die Wireless Location System has a separate (able that defines 
the rwndtdatp list of SCS's 10 and antennas lO-l to use «4ienever a wireless transmitter 
25 initiates a transmission in that cell site and sector. Rather than dynamically choose the 
canfUdate SCS/antennas eadi time a location request is triggered, the Wireless Location 
System reads the candidate list directly fiom the table when location processing is 
initiated. 

30 In general, a large number of candidate SCS's 1 0 is chosen to provide the Wireless 
Location Syston widi suifident opportimity and ability to measure and mitigate 
mult^ath. On any given transmission, ai^ cme or more particular antennas at one or 
more SCS*8 10 may receive signals that have been affected to varying degrees by 
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multipath. Therefore, it is advantageous to provide this means within the Wireless 
Location System to dynamically select a set of antcraias that may have received less 
multipath than other antennas. The Wireless Location System uses various techniques to 
mitigate as much multipath as possible from any received signal; however it is frequently 
S pnident to choose a set of antennas that contain the least amoimt of multipath. 

Choosing Reference and Cooperating SCS/Antennas 

In choosing the set of SCS/antennas to use in location processing, the Wireless 
Location System ordas the candidate SCS/antennas using several criteria, including for 

10 example: average SNR over the transmission interval used for location processing, the 
variance in the SNR over the same interval, cozielation of the beginning of the received 
transmission against a pure pre-cmsor (i.e. for AMPS, the dotting and Baiker code) 
and/or demodulated data fiom the pximaiy SCS/antenna. the time of the oo-set of the 
transmission relative to ae oo-set repotted at the SCS/antenna at w^iichlhe transmission 

IS v«s demodulated, and the magnitude and rate ofchangeofthe SNR fiomjust before the 
on-set of the transmission to the on-set of the transmission, as well as other similar 
paiametars. Hie average SNR is ^ically detennined at each SCS . and for each antenna 
in the candi ^ff itg list eittier over the entire lengtfi of the transmission to be nsed for 
location processing, or over a shorter intervaL The average SNR over the shorter interval 

20 can be detennined by per fbn ning a cotrelation wifli the dotting sequence and/or Barker 
code and/or sync word, depending on the particular air interface protocol, and over a 
diort range of time before, during, and after tiie timestamp reported by the ptinuiy SCS 
1 0. The time range may typically be 200 microseconds ce n t er ed at die timestanq). for 
example. The Wirdess Location System will generally order the candidate SCS/antennas 

25 using die following criteria, each of «4iich may be weighted ^en eondrining the criteria 
to determine the final decision: average SNR for a given SCS/antemia must be greater 
than a pFedetermined dneshold to be used in location processing; SCS/antennas with 
higher average SNR are preferred over those with lower average SNR; SCS/antennas 
witti lower SNR variance are p re fen ed to tiiosewifli higher SNR variance SCS/antennas 

30 with an on-set closer to the on-set rqwrted by the demodulating SCS/antenna are 

fnefened to those with an on*set more distant in time; SCS/antennas with a foster SNR 
rate ofdiange arc inefoirBd to those with a slower rate of change; SCS/antemias with 
lower incremental weighted GDOP are preferred over those with higlier incremental 
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weighted GDOP, wherein the weighting is based upon estimated path loss from the 
primary SCS. The wci^ting ^licd to each of these preferences may be adjusted by the 
operator of the Wheless Location System to suit the particular design of each system. 
The number of different SCS's 10 used in the location processing is maximized up to a 
S predetermined limit; the number of antennas used at each SCS 1 0 in limited to a 
predetnmined limit; and the total number of SCS/antennas used is limited to 
max_nmiiber_antenna5_pn)cessed. The SCS/antenna with the highest ranking using the 
ttoove described process is designated as the reference SCS/antenna for location 



10 

Best Port Selection Wifliin an SCS 10 

Frequently, the SCS^ntennas in ttie candidate list or in the Usl (o use in location 
processing will include only cme or two antennas at a particular SCS 10. In these cases, 
the Wireless Location System may permit the SCS 10 to choose tiis*1>est port" fiom all 

IS or some of fbe antennas at tfie paxtioolar SCS 10. For example^ if die Wireless Location 
System chooses to use only rate antenna at a first SCS 10, foen the first SCS 10 may 
select the best antenna port from the typical six antenna ports that are connected to thai 
SCS 10, or it may choose the best antenna port fimn among tiie two antenna ports of just 
oiie sector of the cell site. The best antemia port is chosen by usng the same process and 

20 comparing the same parameters as described above for choosing the set of SCS/antennas 
to use in location processing, except that all of the antranas being considered for best 
port are all in the same SCS 10. In cmnparing antennas for best port, die SCS 10 may 
also optionally divide the received signal into segments, and then measure tfie SNR ' 
sqiarately in each segnient of the received signal. Thai, the SCS 10 can optionally 

25 choose the best antemia port witfihigjbKst SNR either by 0) using the antenna port with 
the most segments widi the highest SNR, 00 averaging die SNR in all segments and 
using the antrn na port with the highest average SNR, or Qii) using the antenna port with 
die highest SNR in any one segment. 

30 Detection and Recovery From Collisions 

Because the Wireless Location System will use data fitun many SCS/antenna 
ports in location.processiiig, foere is a chance that the received signal atone or more 
particular SCS/antenna ports contains energy that is co-channel interference from 
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another wireless transmitter (i.e a partial or full collision between two s^arate wireless 
tTBnsmissions has occtirred). There is also a reasonable probability that the co-channel 
interference has a much higher SNR than the signal from the target wireless transmitter, 
and if not detected by the Wireless Location System, the co-channel interference may 
5 cause an incorrect choice of best antenna port at an SCS 10, reference SCS/antenna, 
candidate SCS/antenna, or SCS/antenna to be used in location processing. The co- 
channel interference may also cause poor TDOA and FDOA results, leading to a failed 
or poor location estimato. The probability of collision increases with the density of cell 
sites in the host wireless communicatioiis system, especially in dense suburban or rural 
1 0 enviroimients where tite frequencies are re-used often and wireless usage by subsoibers 
is high. 

Therefore, the Wireless Location System includes means to detect and recover fiom the 
^pes of collisions described above. For exan:^>le, in the process of selecting a best port, 

1 S reference SCS/antenna, or candidate SCS/antenna, the Wirdess Location System 

detennines the average SNR of foe received signal and ttie variance of foe SNR over the . 
interval of the transmission; vtbm foe variance of the SNR is above a piedetennined 
foreshold. foe Wireless Location System assigns a probability that a collision has 
occurred. Iffoe signal received at an SCS/antenna has increased or decreased its SNR in 

20 a singte step, and 1^ an amount greater foan a predetermitted threshold, the Wireless 
Location System assigns aprobability thai a collision has occurred. Furfoer. iffoe 
average SNR of foe signal received at a remote'SCS is greater than the average SNR that 
would be predicted by apropagation modd, given foe cell site at ^xfoich the wireless 
transmitter initiated its transmission and foe known transmit power levels and antenna 

2S patterns ofthe transmitter and receive antennas, die Ai^Hreless Location System assigns a 
probability that a collision has occurred. If foe probability that a collision has occurred is 
above a predetermined threshold, then the Wireless Location Systran perfomis the 
forfoer processing described below to verify whefoer and to what extent a collision may 
have impaired the received signal at an SCS/antenna. The advantage of assigning • 

3 0 probabilities is to reduce or eliminate extra processing for foe majority of transmissions 
for Mviiich collisions have not occurred. It should be noted thai the threshold levels, 
assigned probabilitiea, and other details of the collision detection and recovoy processes 
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described herein are configurable, i.e., selected based on the particular application, 
environment, system variables, etc., that would affect their selection. 

For received transmissions at an SCS/antenna for which foe probability of a collision is 
5 above foe predetermined threshold and before using RF data from a particular antenna 
port in a reference SCS/antenna deteimination. best port detennination or in location 
processing, the Wireless Location System preferably verifies that foe RF data from each 
antenna port is from foe correct wireless transmitter. This is deterroined, for example, by 
demodulating segments of foe received signal to verily, for example, foat foe NUN, 

1 0 MSID, or ofoer identifying information is correct or that foe dialed digits or ofoer 
message characteristics match those received by foe SCS/antenna that initially 
demodulated foe transmission. The Wireless Location System may also correlate a short 
segment of foe received signal at an antenna port wifo the signal received at the primary 
SCS 10 to verify that the correlation result is above a pnedetermined threshold. Iffoe 

1 5 Wireless Location System detects thai the variance m the SNR over the entire lengfo of 
foe transmission is above a pre-detennined threshold, foe Wireless Locatim System may 
divide foe transmission into segments and test each segment as described herein to 
determine whefoer the energy in that segment is primarily from foe signal from the 
wireless transmitter for which location processing has been selected or fiom an 

20 in) 



The Wireless Location System may choose to use the RF data fiom apartieular 
SCS/antenna in location processing even if the Wireless Location System has detected 
that a partial collision has occurred at that SCS/antenna. In these cases, foe SCS 10 uses 

25 foe means described above to identify foat portion of the received transmisxion v^ch 
represents a signal from foe wireless transmitter for which location processing has been 
selected, and that portion of foe received transmissifm whidi contains co<haimel 
in t e rf e ren ce. The Wireless Location System may command the SCS 10 to send or use 
only selected segments of foe reedved transmission foat do not contain foe co-charme] 

30 interference. When detemiining the TDOA and FDOA for a baseline using only selected 
segments fiom an SCS/antenna, the Wireless Location System uses only the 
corresponding segments of tiw transmission as received at foe reference SCS/anterma. 
The Wireless Location System may continue to use all s^ments for baselines in which 
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no collisions were detected. In many cases, the Wireless Location System is able to 
complete location processing and achieve an acceptable location error using only a 
portion of tbe transmission. This inventive ability to select the a^jpropriate subset of the 
received transmission and pcrfonn location processing on a segment by segment basis 
5 enables the Wirdesa Location System to successfully complete location processing in 
cases that might have failed using pievious tedmiques. 

Multioie Pass Location Processing 

Certain qrplications may leqoiie a very fast estimate of the genera] location of a 

10 wireless transmitter, followed by a more accurate estimate of the location that can be sent 
subsequently. This can be valuable, fSar example, for E9-1-1 s^tems that handle wireless 
calls and must make a call routing decision very qniddy, but can wait a little longer for a 
more exact locatiCHi to be displayed upon the E9-1-1 call-taker's electnmic m^ tenninal. 
The Wireless Location System sappoits these applications with an inventive multiple 

IS pass location processiiig mode. 
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a and increasing the inocessing gain througjh longer integnnicm intervals. But 
longer segments of the transmission require longer processing periods in the SCS 10 and 
TLP 12, as well as Icmgcr time periods for transmitting the RF data aCTOss the 
Gonmiunications interiace fiom tiie SCS 10 to tfte TLP 12. Therefore, the Wireless 
Location System inrhidffs means to identify diose transmisrions that require a fast but 
iDUg^ estimate of tbe location followed by more ccm^lete location processing that 
produces a better k>cation estimate. Ihe Signal of Interest Table includes a flag for each 
Signal of hitercst that requires a mult^le pass location tqiinDach. This flag q>ecifies the 
mnytmiMfn amount of time pennitted by the requesting location i^lication for the first 
ffitffmpfai to be sent, as well as flie ma xi™™ amoimt of time permitted by tbe requesting 
location apphcatioo for the final location estimate to be sent The Wtrdess Location 
System perfonns the rough location estimate by selecting a stibset of the transmissicm for 
which to perfonn location processing. The Wireless Location System may choose^ for 
example, the segment that was identified at tiie primary SCS/antenna with tiie highest 
average SNR.- After die nmgh location estimate has been determined, usmg (he mediods 

described earlier, but with only a subset of the transmisaon, die TLP 12 forwards die 
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location estimate to the AP 14, which then forwards the rough estimate to the requesting 
application with a flag indicating that the estimate is only rough. The Wireless Location 
System then performs its standard location processing using all of the aforementioned 
methods, and forwards this location estimate with a flag indicating the final status of this 
S location estimate. The Wireless Location System may perform the rough location 
estimate and the final location estimate sequentially on the same DSP in a TLP 12, or 
may perform the location processing in parallel on different DSP's. Parallel processing 
may be necessary to meet the maximum time requirements of the requesting location 
applications. The Wireless Location System supports difforent m ax imum time 
10 requirements fiom different location implications for the same wireless transmissioa. 

Very Short Baseiine TDOA 

Tbe Wireless Location Systcan is designed to operate in urban, suburban, and 
rural areas. In rural areas, when there are not sufficient cell sites available fiom a single 

IS wireless carrier, (he Wireless Location System can be deployed with SCS's 10 located at 
the cell sites of odier wireless carriers or at otiier types of towers, including AM oi FM 
radio station, pftgii^, and two-wiv wireless towers, la these cases, rather than sharing the 
existing !»T | twrmaa of the wireless carrier, the Wireless Location System may require the 
installation of ypnun iate antennas, filters, and low noise amplifiers to match the 

20 fi-equencybandof the wirdess transmitters of interest to be located. For example, an AM- 
nidio station tower inay require the addition of 800 MHz antennas to locate cellular bazid • 
transmitters. There may be cases, however, ^erdn no additional towen of any type are 
available at reasonable cost and the l^rdess Location System must be dqiloyed on just 
a few towns of ttie wirdess canrier. In these cases, the Wirdess Location System 

25 supports an antenna mode known as very short baseline TDOA. This antenna mode 
becomes active liiiien additional antennas are rnstalled on a single ceD site tower, 
wherdiy die antennas are placed at a distance of less than one wavelength apart. This 
may require the additicm of just one antenna per cdl site sector such that the Wirdess 
Location System uses one existing receive antenna in a sector and one additional antenna 

30 that has been placed next to the existing recdve8Dtemia.Typicdly, the two antennas in 
the sector are oriented sadi that the primary axes, or line of direction, of the main beams 
are paralld and tiie ^padng between the two antenna demento is known with precision. 
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In its normal mode, die VHreless Location System determines the TDOA and FDOA for 
pairs of antenna diat are separated by many wavelengths. For a TDOA on a baseline 
s fiom two difference ceU sites, &e pairs of antennas are separated by 
s of wavdengdis. For a TDOA on a basdine using antennas at the same cell 
site, (he pairs of antennas are separated by tens of wavelengths. In either case, the TDOA 
ddenmnation effectivdy results in a hyperix>]ic Une bisecting the baseline and passing 
1 0 dirough the location of the wireless transmitter. When antennas are separated by multQ>le 
wavelengths, the received signal has taken indqiendent paths from the wireless 
transmitter to each antenna, including experiencing different muttipBdi and Doppler 
shifts. However, when two antennas arc closer tiian one wavelength, the two received 
agnals have taken essentially Ihe same padi and experienced die same foding. multipadi, 
IS and Doppler shift Therefore, die TDOA and FDOA processing ofdwWneless Location 
System typically produces a Do^^ler shift otxero (or near-zero) hertz, and a time 
(fifferenoe on the order of zero to one nanoseocmd. A time dififorence that short is 
equivdent to on tmambiguous phase difference between die signals recdved at ttw two 
sntemuts on die very short baseline. For example, at 834 MHz, die wavelengdi of an 
20 AMPS reverse control channdtinnsmissian is about 1.18 foet. A time difference of 0.1 
fi«iinwwiii« is equivalent to arecdved phase difference of dxiut 30 degrees. In (his 
case, the TDOA measuremmt produces a hyperbola (hat is essentially a straight line, still 
passmg duDugh die location of dw wirdess transmitter, and in a direction diat is rotated 
30 degrees from Uie direction of die paralld Iniaa formed by the two antennas on die 
25 very short basetuie. When die resttttsofdus very short baseline TDOA at die single cell 
site are combined widi a TDOA measurement on a basdine between two cell sites, the 
Wireless Location System can detemune a location estimate using ooty two cell sites. 

Improved Methods for Esthnating TDOA and/or FDOA 
30 Wirdess Location Systems based wholly or in part on TDOA generally perform a 

cioss-correlation on pairs of received signals. A mobile phone or other mobile 
transmitter makes a transmisdcn diat is then received at multiple antennas in the system. 
The location system may then dynamicdly choose one of die antennas as the "primary* 
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antetma and use the remaining antennas as "cooperating" antennas. The signal recdved 
at the primary antenna is then known as the reference signal and the signals received at 
die cooperating antennas are known as cooperating signals. Cross-correlation, in dther 
the time or ftequency domain, is done in order to determine precisely the TODA and/or 
5 FDOA of die primary and cooperating signals. 

As mentioned, the WLS cross-correlates each cooperating signal with the reference 
signal, usmg ddier one of a mathrmatically equivalent set of processes - cither a time- 
domain cross-coirclatioii process or a fiequcncy-domain cross-spcctnmi process. Both 

10 die tiine<toniaincross-oortelation process and die frequency-domain cross-spectrum 
process are referred to as cross^onrdation, and so any reference herein to cross- 
oonelation or cross-couBlating should be understood to refer td ddier die time-domain 
doss-coirelaticm process or die fiequency-domain cross-spectrum process, or any other 
madiematically equivalent process. These madiematically equivalent processes to cross- 

1 5 corrdation inchide die use of Kahnan FUters, Matched FUters, or odier matching filters. 
Pattern recognition techniques niay also be used on die cooperating signal in die time 
and/or fiequency domains to estimate die goodness-of-fit to the reference dgnal. For 
processing efficiency purposes, a cross-spectrum process is usually used. The WLS 
separately cros»<onrolates each recdved cooperating signd widi die reference signal. 

20 producing a s^arate TDOA result for each pair of signals. An im^inaiy line drawn 
fiom die primary antama to each cooperating antenna is known as a basdine, and 
diereforo eadi TDOA result is assodated widi a spedfic baseline. The TDOA results, or 
baselines, are dien combined togpdier along widi a priori knowledge of dw locations of 
the recdving antennas to produce a location estimate of the nubile transmitter. 

25 

The cross-correlation process yidds an array of values. The auay may be eitiicr one- 
dimensi(»al or two-dimensional. A one-dimensional array contains vahies diat represent 
die magnitude of die cross-correlation over a range of possible TDOA time values. For 
exanqile. an array may contain cells diat are o£6d in time by 5 microseoonds each. Each 
30 ceil contains the result of die cross-conelation when that time value is tested as a 

possible TDOA estimate. In die array, one result of die cross-correlation will be more 
optimal dian dte odier results, and die TDOA estimate for diat baseline is set equal to die 
time value assodated with die cell containing the optimd cross-coirelation result Supa- 
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icsoludon tccliili<iu6S used in & WLS can result in time values that are interpolated 




approximately 26.8 microseconds (assxuning that radio waves propagate at the rate of 






between two tine vslucs. A two~dJinciisioiial array contains values that represent tbe 




0.984 feet per nanosecond). By convention, a TDOA value of 0 microseconds is defined 






magnitude of the cross-conelation over a range of both possible TDOA time values and 




to be at the point exactiy halfway between the first and second antenna, therefore the 






possible FDOA frequency vahics. A non-zero FDOA value can result from Doppler shift 




range of time values between the first and second antennas is from +13.4 microsecond to 




5 


if the mobile bansmitter (or a reflective snrfaoe) is moving. A search of the cross- 


5 


—13.4 miaoseconds. Because there may be errors associated with precisely knowing the 






correlation aixay to find the optimal value will then result in simultaneously finding a 




exact time at each receiver connected to each antenna, the rBnge of time values searched 






TDOA ffwtt an FDOA value. 




can be expanded slightiy by a predetermioed error value. If an error value of 100 










nanoseconds is used in this example, then the range of times searched can be -i-l 3.5 






Because die WLS generally does not know etthn the location of the mobile transmitter 




microseconds to —13.5 microseconds. 
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or whether the transmitter is moving (thereby c«««Tng Doppler shift) before initiating 


10 








such processing, the cross-coirelation lesutls are searched over a wide range of possible 




This exanple can be expanded by using additional information about tiie mobile 






IDOA ap^ FDOA values to find the optimal values. The presence of interferiitg 




ttansnutter to further limit the range of time values searched. If the mobile transmitter is 






transmitters, mulripath, and other noise sources may cause &lse results — that is, there 




known to be closer to tiie reference sito than tiie cooperating site, then the range of time 






may be otiier values in the annay of cross-ooirdation results that are close to the optimal 




values searched can be limited to only positive values: +13.5 microseconds to 0 




IS 


value, or perti^ even greater dian the optimal vahie. These values may produce a 


IS 


microseconds. If the mobile transmitter is known to be within a particular distance of the 










reference ceU site, determined by either a round trip delay measurement or relative 






value, anH diaefbre an inoonect associated TDOA and/or FDOA value. There is. 




power measuremeiit, tiwn the range of time values searehod can be fiiither limited. Each 






fheicfbic, a great sdvontage to a method that r^n reduce fnobability of false results 




itmfring of the search range increases the probability of correctly finding the optimal 






occumng. 




result and decreases the probability of incorrect^ selecting a false result 




20 
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When mobile transmitteis siich as mobile phones are considered, the array of correlation 






1DOA or FDOA search to a range of values ifipi cscnt- the most likely range of 




values is usually two-diimnsional because ptiones are fixquently in motion. A mobile 






values to the excfusion of all other possible values. This mventiMi has particular vahie 




transmitter in motion will cause a different Dealer sHft for eadi baseline, or each pair 






for few SNR signals, where the probability of a fidse result due to noise incsreases 




of reference-cooperating signals for which a cross-correlation is performed. The 




25 


significantly relative to the probability of fiTwfrrg the true optimal result. Mobile 


25 


probability of incoixectly sdecting a &Is6 result increases in a two-dimensional arr^ 






tzansmittera tffl^r^ i^Kin CDNfA or other ^iread plectrum air interface protocols are 




because FDOA and TDOA must be determined simultaneous^. An enor in identifying 






csxan^lcs of protocols firctpicntly wntf low SNR signals. 




the Doppler shift (FDOA) correctly can lead to also identi^ng TDOA incorreclly. The 










mW^II^w ZA^m^4%r T^wwil^r ohiA Amt rmM arJi vrilfi Imv 9SN1t filftnftls StlCh flft tllOSB 

ftPillTy iO COlTCCtly lOGuSuy J./OppiCr aUW QOCIcBSCo WllH lUW ^Vt^ wiy liiiff bv^ai «9 






One exan^leof constxaiBed TDOA involves limiting the search for (he optimal vahie of 




genoaled by CDMA or other spread ^lectnim air interface protocols. Therefore, the 




30 


the magoitiide of the cross-conelation to an interval or seatch range (hat is no larger than 


30 


^sctosed tmrention also includes a mechanism for Umiting the search for FDOA vafaiBS 






the distanw? in time between tbe fiist antenna associated with the reference signal and the 




to ft predefined range. 






second Ti*»!wt>fl associated widi the cooperating signal. In this example^ if the first and 










second antennas are at diSerent cell sites S miles apart, then fiiey are sqjarated in time by 
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In one example if the mobile transmitter is known to be stationary then the FDOA 




In the third case, full Doppler search and a tighUy constrained time search, tbe wireless 






search range can be Umitcd to 0 Hertz, or to 0 Hertz +/- a predefined eaior value. If the 




device is assumed to be moving, but is very near the cooperating site. Both assumptions 






clocks used in the receivers at tiie first and second antennas have a relative dzifi rate of 




are drawn fixMn the signal received by the primary site. 






less thfln 1 Hz, then the FDOA search range may be limited to "^1 Hz to ~ 1 Hz. *nie 








5 


mobile transmitter may be known to be stattonaiy if it is located m a parked car or m a 


s 


In addition, in the fourth case, constrained Doppler search, ti^tly constrained time 






crate in a warehouse. The transmitter may also be assumed to be stationary if one or 




search, the wireless device is assumed to be stationary or moving very slowly and is very 






more baselines wilh strong received signals result in zepo or very low Doppler shifts. 




near the cooperating site. Both assumptions are drawn finm the signal received by die 






This knowledjge may be used m the cuii elation prof<essmg fnr o&er baselines for w^uch 




primaiy site. 






the received signals m^r be weaker, and which tiie comlanon processmg may 










independently have more difficult in correctly detennming FDOA. 
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Referring now to Figure 10, the presenUy preferred implementation of the invention may 










be summarized as follows: First, a set of cross-coirelation values is provided. As 






Hie disclosed invention is particulaily advantageous if both luOA and FDOA can be 




dtsciissed above, each cross-correlation value is associated with a corresponding TDOA 










and/or FDOA rfjtiT""*^ and is produced by ooss-correlating a reference signal with a 










cooperating signal. Next, a most likely range of TDOA and/or FI>OA estimates is 




15 


By fiirther limiting the searches based on threshold conditions, a possible fbur 


IS 


determined, and then an cqitimal cross^orrelation value is identified within a subset of 






constrained casrs are pi mduced^ 




cnss-coirelation values corresponding to the most likely range of TDOA and/or FDOA 






1 . fiill Doppler search, fisll time search^ 




estimates. Finally, the TDOA and/or FDOA value cozreqionding to the <qitimal cross- 










coirdation value is employed in calculating the location of the mobile transmitter. 






3. fiiii Doppler sftajybi tightly constrained time searehy 
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4. ccmstiained Doppler search, tij^tly constramed time search. 


20 


Conclusion 






These cases are sppropnato under very specific cii^uimstflnces. 




The tnie scope tiie present invention is not limited to the presently preferred 










embodiments disclosed horeiiL For exanqile, the fitregoing disclosure of a presently 






For tfic first frtwft, a full Dopplcx search with a full time ^y^i^h, the wireless device may 




preferred embodiment of a ^^ireless Location System uses explanatory terms, such as 






bo cither moving or stationary and mi^ be anywhere to the range of tiie signal collection 




Signal Collection System (SCS), TDOA Location Processor (TLP). .^iplications 






sySttxn receiver. 


25 


Processm- (AP), and tbe which diould notbe construed so as to limit the scope of 










protectim of the foUowiiig claims, or to otherwise imply that the inventive aspects of the 






In the second case, constrained Doppler search with a full time search, the wireless 




system are limited to tbe particular metiiods and apparatus disclosed. Moreover, as will 






device is assumed to be nearly stationary based on the signal initially received by the 




mj^d3tood by ^iiQgc skilled in the art, maiiy of tiie inventive aspects disclosed herein 






primary site. The wireless device may be anywhere in the range of the signal collection 




may be qiplied in location systems tiiat are not based on TDOA tet^miques. For 




30 


system receiver. 


30 


example, tiie processes by «iiich the Wireless Location Syston detennines TDOA and 










FDOA values can be applied to non-TDOA systems. Similarly, the invention is not 










Itmited to systcms enqiloying SCS's constructed as described above, nor to aysteou 










employing APs meeting all of the particulars described above. The SCS's, TLP*s and 
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AP*s are, in essence, piognunmable data collection and processing devices that could 
take a variety of fonm without departing from the inventive concepts disclosed herein. 
Given the i^idly declining cost of digital signal processing and other processing 
functions, it is easily possible, for example, to transfer the processing for a particular 
flmction fiom one of the functional elements (such as the TUP) described herein to 
another fimctional element (sodi as the SCS or AP) without changing the inventive 
<verat]oa of the system. In many cases, the place of implementation (i.e., the functional 
element) described herein is innely a de»gner's preference and not a hard requirement. 
Acooidiogly. excqit as they may be expressly so hmited, the scope of protection of the 
following claims is not intended to be limited to the specific embodiments described 
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CLAIMS 

What is claimed is: 

1 . A method used in locating a mobile transmitter far improving a time difference of 
arrival (TDOA) estimate produced by cross-correlating a reference signal with a 
cooperating signal, using either a time-domain cross-correlation or frequency- 
domain cross-spectrum process, wherein the reference signal is a copy of a first 
signal transmitted by the mobile transmitter as received at a first antenna and the 
cooperating signal is a copy of the first signal trmisniitted by the mobile 
transmitter as received at a second antenna, comprising the steps of: 

a. determining a most hlceiy range of TDOA estimates; 

b. searchii^ the cross-coirdation results only within the most Hkety range of 
TDOA estimates; and 

c estimating (he TDOA to be the value within the most likely range that is 
associated widi an optimal valtn of the magnitude of the cross- 
conelation. 

2. A method as ledted in claim 1, wherein the most likely range of TIX>A estimates 
is limited to time vahies associated witii the distance between the first antenna at 
which die refiamce signal was received and the second antenna at vildch the 
co(^>eratin8 si^ial was received, phis apredetenninedeirorvahie. 

3. A method as recited in claim l.whCTein the most likely range of TDOA estimates 
is detemiined as corresponding to only an area in which the mobile transmitter is 
a priori known to be located. 

4. A inelfaod as ledttd in claim l.iii^ietein the optimal vahxe is tfie highest 
magnitude peak of the time-domain cross-cotrelation or eqmvaleot fiequency- 
domam cross- spectrum pmcess. 

5. A method as recited in claim l,«4ierein the optimal vahie is the earliest point in 

tinw when the magnitude of the time-domain cross^iielation or equivalent 

figquency-dwnam cross ^wctrum process is no less ftan a predetemiined 
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6. A method as recited in claim 1 , wherein the optimal vahie is the eariiest point in 
time when the magnitude of the dme-domain cross-correlation or equivalent 
frequency-domain cross-spectrrmi process is no less than a predetermined 
proportion of the average noise level. 

7. A method as recited in claim 1, wherein the mostly tike range of TDOA estimates 
is further limited so as to correspond to an area within a jvedetemiined t^j^nr^. 
from the first antenna receiving the reference signaL 

8. A method as recited in claim 1, wherein the mostly like range of TDOA estimates 
is fuitlier limited so as to coirespond toim area within a predetermined distance 
from the second antenna receiving the co<^>erating signal. 

9. A method as recited in claims 7 or 8, i^erein the predetermined distance is 
detemiined using a round trip delay measurement. 

10. Amethod as recited in claims 7 or 8, \idierein die predetermined distance is 
detemmned by measuring the received power of the mobile phone at the first and 



b. determining a most likely range of TDOA estimates; 

c. searching the cTOss^irelation results only vridun the most likely range of 
TDOA and FDOA estimates; 

d. estimating the TDOA to be the value wifliin the most likely range that is 
associated with an optimal vahie of the magnitude of the cioss- 



1 2. A method as recited in claim 1 1 , wherein the most likely range of FDOA 

estimates is limited to the frequency values associated with a stationary or nearly 
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13. A method as recited in claims 1 1 and 12, wherein the most likely range of TDOA 
ft^tinn***^ is limited to time values associated with the distance between the first 
antenna at which the reference signal was received and the second antenna at 

13 which the cooperating signal was received, phis a predetermined emir value. 

14. A method as redted in claims U and 12. wherein the optimal value is the highest 
piagni tnrtft peak of the time-domain cross-correlatim or equivalent finquency- 



11 . A method used m locating a mobile transmitter for improving a time difference of 
arrival (TDOA) estimate ixoduced by cnss-coirelating a reference signal with a 
cooperating signal, using cither a time-domain cross-coiielation or equivalent 
frequency-domain cross-spectrum process, wherein either process requires the 
simultaneous solution of both frequency difference of arrival (FDOA) and 
TDOA, wherein the reference signal is a copy of a first signal transmitted by the 
mobile transmitter as received at a first antenna and die cooperating signal is a 
o^y of the first signal transmitted by the mobile transmitter as received at a 
second antenna, comprising the stqn of: 

a. determimug a most likely range of FDOA estimates; 
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15. A method as recited in claims II and 12, wherein the optimal vahie is the earUest 
point in time w^en the magoitude offbc timenSoniain cross-coirelation or 
equivalent frequmcy-domain cross spectrum process is no less than a 
predetennined prc^oition of the highest magnitude peak of title time-<lomain 

25 cross-correladon or equivalent frequency-domain cross spectrum process. 

16. A method as recited in claims II and 12, whoein the optimal vahie is the earliest 
point in time the magmtode of the time-domain cross-conrelation or 
equivalent frequency-domain cross spectrum process is no less than a 

30 predetennined proportion of the average noise level. 
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17. A method as recited in claim 12, wherein the mostly like range of TDOA 








estimates is further limited so as to correspond to an area within a predetennined 




23. A method as recited in claim 21 , wherein the cross-coirdating comprises cross- 




distance from the first antenna receiving the reference signal. 




corrdating in the frequency-domain. 


5 


18. A method as recited in claim 12, wherein the mostly like range of TDOA 


5 


24. A method as recited in claim 21, wherein the most likely range of TDOA 




esdmates is fiuthcr limited so as to correspond to an area within a predetomined 




etrtim"*"' is based upon a rou^ estimate of die location of the mobile transmitter. 




distance from the second antenna receiving the cooperating signal. 












25. A method as recited in claim 21, wherein the most likely range of FDOA 




19. A method as recited in claims 17 or 18» wherein the predetennined distance is 




estimates is based i^n a rough estimate of the speed of the mobile transmitter. 


10 


deteimined using a round trip delay measurement. 


10 










26. A meOiod as redted in claim 24, wherein the rough estimate is based at least in 




20. Amethod as recited in dums 17 or 18, wherein the pfedetermined distance is 




part on the distance between the first and second antennas. 




detomined by measuring the received power of the mobile phone at the first and 








second antennas. 




27. A method as redted in claim 26, wherein the rou^ estimate is further based on a 


IS 




IS 


preddennined error vdue. 




21. A method used in locating a mobile transmitter, comprising: 








a. providing a set ofcross-Gcmxlationvahies, wherein each cross-correlation 




28. Amethod as redted in claim 24, wherein the rough estimate is based on an area 




vahie is associated with a ccnreqponding TDOA and/or FDOA estimate 




in wtdeh the mobile transmitter is a priori known to be located. 




and is ptodnced by ooss-oonelating 8 reference sigaal witii a coc^ierating 






20 


signal, the reference signal oonqnising acopy of a signal transmitted by 
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29. A method as redted in claim 21, wherein the cross-condation value having the 




die mobile transmitter as recMved at a first antoma and the cooperating 




largest peak magnitude widiin add subset ofcross-coirdation values is identified ■ 




signal oooqnising a copy of the signal transmitted by Ibe mobile 




as the optimal cross-correlation value. 




transmitter as recaved at a second antenna; 








b. determining a most Ktely range of TDOA and/or FDOA estimates; 




30. Amednd as redted in claim 21, comimsing identifyring, as the optimal cross- 


25 


c. identifying an optimal cioss-coirelstion value witfiin a snbset of cross- 


25 


conelation value; the value widiin sdd subset of cross-ooneladon vahies having 




coirelation values coneqwnding to the most likely range of TDOA and/or 




the smallest as!HKTa*wT TDOA cfHTn"*** for wfaidi the magnitude is no less than a 




FDOA estimates; and 




predetennined' proportion of the largest peak magnitude. 




d. employing the TDOA and/or FDOA value coirespondfing to the optimal 








cross-coiTeladon vahte in calculating the location of the mobile 




31. Amethod as redted in claim 21, comptisiiig identifying as the optimal cxoss- 


30 




30 


coRcladon valu^ die vahie within sdd subset of cross^oirdaticm values having 








the smallest associated TDOA estimate fortidiidi the magnitude is no less than a 




22. A method as recited in claim 21, wherein die cross-conelating comprises cross- 




predetemiined proportion of an average noise leveL 




corrdating in the time-domain. 
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32. A mediod as recited in claim 24, wherein die rough estimate is based on an area 




39. A system as recited in claim 36, finther con^jrising means for enq>ioying the 




within a predetennined distance bona, die first antenna. 




TDOA and/or FDOA value corresponding to the optimal cross-conelaticm vahie 








in calculating the location of the mobile transmitter. 




33. A method as recited in claim 24, wherein the rough estimate is based on an area 






5 


within a predetennined distance from the second antenna. 


S 


40. A method for use in a Wireless Location System (WLS) for locating a mobile 








transmitter, compnsing: 




34. A method as recited in claims 32 or 33,-wherein the predetermined distance is 




a. deterniiiiing a niost likely range of TDOA Bod/or FDOA estimates; and 




determined using a roond trip dday measnmnent 




b. identifying an optimd cross-correlation value within a subset of cross- 








correlation vdues corresponding to the most likely range of TDOA and/or 


10 


35. A mediod as cedted in claims 32 or 33, wherein the {Redetermined distance is 


10 


FDOA estimates, said snbset of cross-correlation values being cantained 




determined by measuring the received power of the mobUe transmitter at the first 




within a set of cross-coirdation values, wherdn each cross-correlation 




and second antennas. 




value in the set is associated widi a corresponding TDOA and/or FDOA 








estimate. 




36. A Wrdess Location ^rstem (WLS) for locatizig a mobile transmitter. 






IS 


comprising: 


15 


41 . A method as recited in claim 40, wherein each value in said set of cross- 




a. means for determining a most likely range of TDOA and/or FDOA 




correlation values and is representative of a cross-con'elation> in the time or 




estimates; and 




fiequency domain, of a refbence signal widi a cooperating signd. 




b. means ibr identifying an optimal crass-correlattOD value within a subset 








of doss-corrdation values corresponding to the most likely range of 




42. A ^stem as redted in claim 41. wherein die reference signal comprises a copy of 


20 


TDOA and/or FDOA estimatea^-said subset of cross-coirdafion values 


20 


a signal transmitted by die molnle transmitter as recdved at a first anteona and 




being contained widiin a set of cross-cotrelatioo vahies, ixtoein each 




the cooperating signal ctm^mses a copy of the agnal transmitted by die mobile 




cioss-corrdation value in the set is associated widi a corresponding 




transmitter as received at a second antenna 




TDOA and/or FDOA estimate. 












43. A system as redted in claim 40, ibrdier comprising employing the TDOA and/or 
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37. A system as zedted in claim 36, v^ierein each value in said set of cross- 
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FDOA vdue corre^wnding to the optimd cross-coirdadon value in cdculating 




corrdation values and is rqnescntative of a cross-correlation, in the time or 




the location of the mobile transmitter. 




fiiequency domain, of a reference signal widi a cooperating signaL 








38. A system as redted in claim 37, wherein die reference signal comprises a copy of 
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a signd transmitted by the mobile transmitter as recdved at a first antenna and 








die cooperating signd comprises a copy of the signd transmitted by the mobile 








transmitter as received at a second antenna. 
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